RHSA-2026:83548

Vulnerability from csaf_redhat - Published: 2026-10-15 10:30 - Updated: 2026-10-15 19:30
Summary
Red Hat Security Advisory: Red Hat Ceph Storage
Severity
Important
Notes
Topic: A new version of Red Hat build of Ceph Storage has been released
Details: The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1. This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-10790

taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64 —
Threats
Impact Important
CVE-2023-25153

A flaw was found in containerd. When importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file, where a limit was not applied could cause a denial of service.

5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64 —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x —
Unresolved product id: Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64 —
Threats
Impact Moderate
CVE-2023-28155

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).

6.1 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Moderate
CVE-2023-46159

A flaw was found in Ceph. Certain misconfigurations of CORS rules in Ceph could result in a significantly large memory allocation. This issue can lead to RGW crashing and a denial of service from an authenticated user on the network.

2.6 (Low)
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-20 - Improper Input Validation
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Low
CVE-2024-5206

A vulnerability was found in the scikit-learn package. Before version 1.4.1, post1 scikit-learn stores all tokens with "stop_words_" attributes. This action may cause scikit-learn to expose sensitive data that will not be used in the model training, possibly leaking passwords and keys.

5.3 (Medium)
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-921 - Storage of Sensitive Data in a Mechanism without Access Control
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Moderate
CVE-2024-11831

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Moderate
CVE-2024-37890

A flaw was found in the Node.js WebSocket library (ws). A request with several headers exceeding the 'server.maxHeadersCount' threshold could be used to crash a ws server, leading to a denial of service.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Moderate
CVE-2024-47866

A flaw was found in Ceph RGW. Using the x-amz-copy-source header to upload an empty object will cause Ceph RGW to crash, leading to availability issues.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 - Improper Input Validation
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Important
CVE-2025-7783

A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.

5.4 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
CWE-330 - Use of Insufficiently Random Values
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-30156

A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication (HMAC), making it vulnerable to the same class of unauthenticated-encryption attacks that compromised Kerberos 4 as documented in MIT's 2004 PERILS paper. An attacker who has compromised a single low-privilege CephX entity key can use the Ceph monitor as an encryption oracle by requesting tickets for specially-named entity identities over a standard network connection. The monitor encrypts these attacker-controlled names into ciphertext blocks which, due to absent integrity protection, can be spliced into forged credentials for privileged entities such as OSDs, MDSs, and MGRs. This grants cluster-wide access including data reads, data corruption, and full administrative control.

8.7 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CWE-1204 - Generation of Weak Initialization Vector (IV)
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Important
CVE-2025-47914

A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-125 - Out-of-bounds Read
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-50181

A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.

5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-50182

A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This vulnerability stems from a failure to constrain the redirect target.

5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-58181

A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-59436

A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.

3.2 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Low
CVE-2025-64718

A prototype pollution flaw has been discovered in the js-yaml npm library. It's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (__proto__). All users who parse untrusted yaml documents may be impacted.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Moderate
CVE-2025-64756

A flaw was found in glob. This vulnerability allows arbitrary command execution via processing files with malicious names when the glob command-line interface (CLI) is used with the -c/--cmd option, enabling shell metacharacters to trigger command injection.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 3 products, the same list as for CVE-2023-25153
Known not affected 15 products, the same list as for CVE-2023-25153
Threats
Impact Important
CVE-2026-50152

A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contains sensitive operational secrets including OSD LUKS disk encryption passphrases and, on clusters managed by cephadm, the SSH private key used to administer every host. Exposure of these secrets can lead to full host-level root access and compromise of encrypted data at rest.

8.2 (High)
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
CWE-862 - Missing Authorization
Affected products
Fixed 3 products, the same list as for CVE-2019-10790
Known not affected 15 products, the same list as for CVE-2019-10790
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:83548 self
https://access.redhat.com/security/cve/CVE-2019-10790 external
https://access.redhat.com/security/cve/CVE-2023-25153 external
https://access.redhat.com/security/cve/CVE-2023-28155 external
https://access.redhat.com/security/cve/CVE-2023-46159 external
https://access.redhat.com/security/cve/CVE-2024-11831 external
https://access.redhat.com/security/cve/CVE-2024-37890 external
https://access.redhat.com/security/cve/CVE-2024-47866 external
https://access.redhat.com/security/cve/CVE-2024-5206 external
https://access.redhat.com/security/cve/CVE-2025-30156 external
https://access.redhat.com/security/cve/CVE-2025-47914 external
https://access.redhat.com/security/cve/CVE-2025-50181 external
https://access.redhat.com/security/cve/CVE-2025-50182 external
https://access.redhat.com/security/cve/CVE-2025-58181 external
https://access.redhat.com/security/cve/CVE-2025-59436 external
https://access.redhat.com/security/cve/CVE-2025-64718 external
https://access.redhat.com/security/cve/CVE-2025-64756 external
https://access.redhat.com/security/cve/CVE-2025-7783 external
https://access.redhat.com/security/cve/CVE-2026-50152 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-10790 self
https://bugzilla.redhat.com/show_bug.cgi?id=2389970 external
https://www.cve.org/CVERecord?id=CVE-2019-10790 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10790 external
https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450 external
https://snyk.io/vuln/SNYK-JS-TAFFY-546521 external
https://www.npmjs.com/package/taffy external
https://www.usenix.org/system/files/sec21-xiao.pdf external
https://access.redhat.com/security/cve/CVE-2023-25153 self
https://bugzilla.redhat.com/show_bug.cgi?id=2174473 external
https://www.cve.org/CVERecord?id=CVE-2023-25153 external
https://nvd.nist.gov/vuln/detail/CVE-2023-25153 external
https://github.com/containerd/containerd/commit/0… external
https://github.com/containerd/containerd/releases… external
https://github.com/containerd/containerd/releases… external
https://github.com/containerd/containerd/security… external
https://access.redhat.com/security/cve/CVE-2023-28155 self
https://bugzilla.redhat.com/show_bug.cgi?id=2389923 external
https://www.cve.org/CVERecord?id=CVE-2023-28155 external
https://nvd.nist.gov/vuln/detail/CVE-2023-28155 external
https://access.redhat.com/security/cve/CVE-2023-46159 self
https://bugzilla.redhat.com/show_bug.cgi?id=2215374 external
https://www.cve.org/CVERecord?id=CVE-2023-46159 external
https://nvd.nist.gov/vuln/detail/CVE-2023-46159 external
https://access.redhat.com/security/cve/CVE-2024-5206 self
https://bugzilla.redhat.com/show_bug.cgi?id=2291228 external
https://www.cve.org/CVERecord?id=CVE-2024-5206 external
https://nvd.nist.gov/vuln/detail/CVE-2024-5206 external
https://access.redhat.com/security/cve/CVE-2024-11831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2312579 external
https://www.cve.org/CVERecord?id=CVE-2024-11831 external
https://nvd.nist.gov/vuln/detail/CVE-2024-11831 external
https://github.com/yahoo/serialize-javascript/com… external
https://github.com/yahoo/serialize-javascript/pull/173 external
https://access.redhat.com/security/cve/CVE-2024-37890 self
https://bugzilla.redhat.com/show_bug.cgi?id=2292777 external
https://www.cve.org/CVERecord?id=CVE-2024-37890 external
https://nvd.nist.gov/vuln/detail/CVE-2024-37890 external
https://github.com/websockets/ws/security/advisor… external
https://access.redhat.com/security/cve/CVE-2024-47866 self
https://bugzilla.redhat.com/show_bug.cgi?id=2392386 external
https://www.cve.org/CVERecord?id=CVE-2024-47866 external
https://nvd.nist.gov/vuln/detail/CVE-2024-47866 external
https://github.com/ceph/ceph/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2025-7783 self
https://bugzilla.redhat.com/show_bug.cgi?id=2381959 external
https://www.cve.org/CVERecord?id=CVE-2025-7783 external
https://nvd.nist.gov/vuln/detail/CVE-2025-7783 external
https://github.com/form-data/form-data/commit/3d1… external
https://github.com/form-data/form-data/security/a… external
https://access.redhat.com/security/cve/CVE-2025-30156 self
https://bugzilla.redhat.com/show_bug.cgi?id=2393864 external
https://www.cve.org/CVERecord?id=CVE-2025-30156 external
https://nvd.nist.gov/vuln/detail/CVE-2025-30156 external
https://access.redhat.com/security/cve/CVE-2025-47914 self
https://bugzilla.redhat.com/show_bug.cgi?id=2416000 external
https://www.cve.org/CVERecord?id=CVE-2025-47914 external
https://nvd.nist.gov/vuln/detail/CVE-2025-47914 external
https://go.dev/cl/721960 external
https://go.dev/issue/76364 external
https://groups.google.com/g/golang-announce/c/w-o… external
https://pkg.go.dev/vuln/GO-2025-4135 external
https://access.redhat.com/security/cve/CVE-2025-50181 self
https://bugzilla.redhat.com/show_bug.cgi?id=2373799 external
https://www.cve.org/CVERecord?id=CVE-2025-50181 external
https://nvd.nist.gov/vuln/detail/CVE-2025-50181 external
https://github.com/urllib3/urllib3/commit/f05b132… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2025-50182 self
https://bugzilla.redhat.com/show_bug.cgi?id=2373800 external
https://www.cve.org/CVERecord?id=CVE-2025-50182 external
https://nvd.nist.gov/vuln/detail/CVE-2025-50182 external
https://github.com/urllib3/urllib3/commit/7eb4a2a… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2025-58181 self
https://bugzilla.redhat.com/show_bug.cgi?id=2415997 external
https://www.cve.org/CVERecord?id=CVE-2025-58181 external
https://nvd.nist.gov/vuln/detail/CVE-2025-58181 external
https://go.dev/cl/721961 external
https://go.dev/issue/76363 external
https://pkg.go.dev/vuln/GO-2025-4134 external
https://access.redhat.com/security/cve/CVE-2025-59436 self
https://bugzilla.redhat.com/show_bug.cgi?id=2395629 external
https://www.cve.org/CVERecord?id=CVE-2025-59436 external
https://nvd.nist.gov/vuln/detail/CVE-2025-59436 external
https://cosmosofcyberspace.github.io/CVE-Applicat… external
https://github.com/indutny/node-ip/issues/160 external
https://access.redhat.com/security/cve/CVE-2025-64718 self
https://bugzilla.redhat.com/show_bug.cgi?id=2414854 external
https://www.cve.org/CVERecord?id=CVE-2025-64718 external
https://nvd.nist.gov/vuln/detail/CVE-2025-64718 external
https://github.com/nodeca/js-yaml/commit/383665ff… external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2025-64756 self
https://bugzilla.redhat.com/show_bug.cgi?id=2415451 external
https://www.cve.org/CVERecord?id=CVE-2025-64756 external
https://nvd.nist.gov/vuln/detail/CVE-2025-64756 external
https://github.com/isaacs/node-glob/commit/47473c… external
https://github.com/isaacs/node-glob/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-50152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519423 external
https://www.cve.org/CVERecord?id=CVE-2026-50152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50152 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:83548",
        "url": "https://access.redhat.com/errata/RHSA-2026:83548"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2019-10790",
        "url": "https://access.redhat.com/security/cve/CVE-2019-10790"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-25153",
        "url": "https://access.redhat.com/security/cve/CVE-2023-25153"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-28155",
        "url": "https://access.redhat.com/security/cve/CVE-2023-28155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-46159",
        "url": "https://access.redhat.com/security/cve/CVE-2023-46159"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-11831",
        "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-37890",
        "url": "https://access.redhat.com/security/cve/CVE-2024-37890"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-47866",
        "url": "https://access.redhat.com/security/cve/CVE-2024-47866"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-5206",
        "url": "https://access.redhat.com/security/cve/CVE-2024-5206"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-30156",
        "url": "https://access.redhat.com/security/cve/CVE-2025-30156"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47914"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-50181",
        "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-50182",
        "url": "https://access.redhat.com/security/cve/CVE-2025-50182"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
        "url": "https://access.redhat.com/security/cve/CVE-2025-58181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59436",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64718",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64718"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64756",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64756"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
        "url": "https://access.redhat.com/security/cve/CVE-2025-7783"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83548.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ceph Storage",
    "tracking": {
      "current_release_date": "2026-10-15T19:30:18+00:00",
      "generator": {
        "date": "2026-10-15T19:30:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:83548",
      "initial_release_date": "2026-10-15T10:30:05+00:00",
      "revision_history": [
        {
          "date": "2026-10-15T10:30:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-15T10:30:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-15T19:30:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 7.1",
                "product": {
                  "name": "Red Hat Ceph Storage 7.1",
                  "product_id": "Red Hat Ceph Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:7.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791450715"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791452229"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3Af493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791453133"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791451373"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3A2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1791452477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Ac5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791450035"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791450715"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791452229"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791453133"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3Ace8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791451373"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3A6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1791452477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791450035"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791450715"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Ac889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791452229"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791453133"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791451373"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3A7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1791452477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791450035"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-10790",
      "discovery_date": "2025-08-20T22:37:38.151000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2389970"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "taffy: taffydb: Internal Property Tampering",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "RHBZ#2389970",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2389970"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10790",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10790",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450",
          "url": "https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450"
        },
        {
          "category": "external",
          "summary": "https://snyk.io/vuln/SNYK-JS-TAFFY-546521",
          "url": "https://snyk.io/vuln/SNYK-JS-TAFFY-546521"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/taffy",
          "url": "https://www.npmjs.com/package/taffy"
        },
        {
          "category": "external",
          "summary": "https://www.usenix.org/system/files/sec21-xiao.pdf",
          "url": "https://www.usenix.org/system/files/sec21-xiao.pdf"
        }
      ],
      "release_date": "2020-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "taffy: taffydb: Internal Property Tampering"
    },
    {
      "cve": "CVE-2023-25153",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-03-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2174473"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd. When importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file, where a limit was not applied could cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containerd: OCI image importer memory exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "RHBZ#2174473",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2174473"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25153",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25153",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4",
          "url": "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/releases/tag/v1.5.18",
          "url": "https://github.com/containerd/containerd/releases/tag/v1.5.18"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/releases/tag/v1.6.18",
          "url": "https://github.com/containerd/containerd/releases/tag/v1.6.18"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2"
        }
      ],
      "release_date": "2023-02-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containerd: OCI image importer memory exhaustion"
    },
    {
      "cve": "CVE-2023-28155",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2025-08-20T21:28:20.747000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2389923"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "request: bypass of SSRF mitigations when following a cross-protocol redirect",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-28155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2389923",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2389923"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-28155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-28155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28155"
        }
      ],
      "release_date": "2023-03-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "request: bypass of SSRF mitigations when following a cross-protocol redirect"
    },
    {
      "cve": "CVE-2023-46159",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2023-06-15T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2215374"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ceph. Certain misconfigurations of CORS rules in Ceph could result in a significantly large memory allocation. This issue can lead to RGW crashing and a denial of service from an authenticated user on the network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: RGW crash upon misconfigured CORS rule",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux does not ship RGW, only the associated client libraries. Hence, versions of Ceph shipped in RHEL are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-46159"
        },
        {
          "category": "external",
          "summary": "RHBZ#2215374",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2215374"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46159",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-46159"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46159",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46159"
        }
      ],
      "release_date": "2023-10-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 2.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ceph: RGW crash upon misconfigured CORS rule"
    },
    {
      "cve": "CVE-2024-5206",
      "cwe": {
        "id": "CWE-921",
        "name": "Storage of Sensitive Data in a Mechanism without Access Control"
      },
      "discovery_date": "2024-06-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2291228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the scikit-learn package. Before version 1.4.1, post1 scikit-learn stores all tokens with \"stop_words_\" attributes. This action may cause scikit-learn to expose sensitive data that will not be used in the model training, possibly leaking passwords and keys.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "scikit-learn: Possible sensitive data leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-5206"
        },
        {
          "category": "external",
          "summary": "RHBZ#2291228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2291228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-5206",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-5206"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-5206",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5206"
        }
      ],
      "release_date": "2024-06-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "scikit-learn: Possible sensitive data leak"
    },
    {
      "cve": "CVE-2024-11831",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2024-09-16T16:43:32.021000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2312579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2312579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-11831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e",
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/pull/173",
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "release_date": "2024-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript"
    },
    {
      "cve": "CVE-2024-37890",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2024-06-17T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2292777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Node.js WebSocket library (ws). A request with several headers exceeding the \u0027server.maxHeadersCount\u0027 threshold could be used to crash a ws server, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs-ws: denial of service when handling a request with many HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-37890"
        },
        {
          "category": "external",
          "summary": "RHBZ#2292777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-37890",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-37890",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37890"
        },
        {
          "category": "external",
          "summary": "https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q",
          "url": "https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q"
        }
      ],
      "release_date": "2024-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "The issue can be mitigated by reducing the maximum allowed length of the request headers using the --max-http-header-size=size or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. The issue can be mitigated also by seting server.maxHeadersCount to 0.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs-ws: denial of service when handling a request with many HTTP headers"
    },
    {
      "cve": "CVE-2024-47866",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2025-09-01T13:34:15.354000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392386"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ceph RGW. Using the x-amz-copy-source header to upload an empty object will cause Ceph RGW to crash, leading to availability issues.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rgw: RGW DoS attack with empty HTTP header in S3 object copy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47866"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392386",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392386"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47866",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47866"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47866",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47866"
        },
        {
          "category": "external",
          "summary": "https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8",
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8"
        }
      ],
      "release_date": "2025-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rgw: RGW DoS attack with empty HTTP header in S3 object copy"
    },
    {
      "cve": "CVE-2025-7783",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "discovery_date": "2025-07-18T17:00:43.396637+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2381959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "form-data: Unsafe random function in form-data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "RHBZ#2381959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
          "url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
          "url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
        }
      ],
      "release_date": "2025-07-18T16:34:44.889000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "form-data: Unsafe random function in form-data"
    },
    {
      "cve": "CVE-2025-30156",
      "cwe": {
        "id": "CWE-1204",
        "name": "Generation of Weak Initialization Vector (IV)"
      },
      "discovery_date": "2025-05-08T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2393864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication (HMAC), making it vulnerable to the same class of unauthenticated-encryption attacks that compromised Kerberos 4 as documented in MIT\u0027s 2004 PERILS paper. An attacker who has compromised a single low-privilege CephX entity key can use the Ceph monitor as an encryption oracle by requesting tickets for specially-named entity identities over a standard network connection. The monitor encrypts these attacker-controlled names into ciphertext blocks which, due to absent integrity protection, can be spliced into forged credentials for privileged entities such as OSDs, MDSs, and MGRs. This grants cluster-wide access including data reads, data corruption, and full administrative control.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that exploitation requires a compromised low-privilege CephX entity key and network access to a Ceph monitor. Successful exploitation allows an attacker to forge credentials for any privileged Ceph entity, gaining full cluster-wide access including data reads, data corruption, and administrative control over OSDs, MDSs, and MGRs. The vulnerability\u0027s root cause is the use of unauthenticated AES-128-CBC encryption with a hardcoded initialization vector in the CephX protocol, a cryptographic design weakness identical to the one that rendered Kerberos 4 insecure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-30156"
        },
        {
          "category": "external",
          "summary": "RHBZ#2393864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2393864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-30156",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-30156"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-30156",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30156"
        }
      ],
      "release_date": "2026-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, Red Hat recommends isolating the Ceph messenger protocol to dedicated internal networks with strict access controls, limiting exposure to potential attackers. Administrators should audit and minimize the number of CephX client credentials in circulation and enforce strong credential management to reduce the risk of low-privilege key compromise. Where possible, deploy msgr2 with on-wire encryption to reduce passive sniffing exposure. It is strongly advised to apply vendor-supplied patches as soon as they are released, upgrade to fixed Ceph versions (Tentacle 20.2.4 or later), and rotate all CephX keys to the new AES-256-CTS-HMAC-SHA384-192 cipher type, prioritizing server-side keys.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass"
    },
    {
      "cve": "CVE-2025-47914",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-11-19T21:01:06.202641+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416000"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416000",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/721960",
          "url": "https://go.dev/cl/721960"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76364",
          "url": "https://go.dev/issue/76364"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
          "url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4135",
          "url": "https://pkg.go.dev/vuln/GO-2025-4135"
        }
      ],
      "release_date": "2025-11-19T20:33:43.126000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
    },
    {
      "cve": "CVE-2025-50181",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2025-06-19T02:00:42.866992+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373799"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the urllib3 library where it could be tricked into disclosing the Proxy-Authorization header to a destination server when a CONNECT tunnel is used. An attacker can set up a malicious redirect to a crafted URL, which, when followed by the client application, will cause the Proxy-Authorization header to be sent to the attacker-controlled server. This leaks sensitive credentials for the proxy. The impact is primarily on confidentiality. While urllib3 is a ubiquitous component, the vulnerability requires a specific scenario where a user is connecting to a proxy that requires authentication and is redirected to a malicious endpoint. This lowers the exploitability compared to a direct, unauthenticated remote attack, thus, warranting a Moderate severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373799",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373799"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-50181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857",
          "url": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"
        }
      ],
      "release_date": "2025-06-19T01:08:00.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation"
    },
    {
      "cve": "CVE-2025-50182",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2025-06-19T02:00:45.813042+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373800"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This \nvulnerability stems from a failure to constrain the redirect target.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 does not control redirects in browsers and Node.js",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability lies in the urllib3 library\u0027s inability to control HTTP redirects when executed within a Pyodide runtime. This can lead to Server-Side Request Forgery (SSRF) attacks, where an attacker can induce the application to make requests to unintended internal or external resources. While urllib3 is a ubiquitous library in the Python ecosystem and is present in many Red Hat products, the vulnerability is specific to its use within the less common Pyodide (Python in a browser) environment. The attack complexity is high as it requires a specific application context where user-supplied input is used to construct a request URL in a Pyodide-based application that also attempts to mitigate SSRF by disabling redirects. The impact is primarily on confidentiality, as a successful exploit could lead to the disclosure of sensitive information from the server\u0027s local network. Given the specific and less common configuration required for exploitation, the severity is rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373800",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373800"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-50182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-50182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",
          "url": "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5"
        }
      ],
      "release_date": "2025-06-19T01:42:44.921000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3 does not control redirects in browsers and Node.js"
    },
    {
      "cve": "CVE-2025-58181",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-11-19T21:00:50.197590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2415997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "RHBZ#2415997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/721961",
          "url": "https://go.dev/cl/721961"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76363",
          "url": "https://go.dev/issue/76363"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
          "url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4134",
          "url": "https://pkg.go.dev/vuln/GO-2025-4134"
        }
      ],
      "release_date": "2025-11-19T20:33:42.795000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
    },
    {
      "cve": "CVE-2025-59436",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2025-09-16T03:00:42.722078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2395629"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip: Node ip SSRF",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "RHBZ#2395629",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395629"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59436",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html",
          "url": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/indutny/node-ip/issues/160",
          "url": "https://github.com/indutny/node-ip/issues/160"
        }
      ],
      "release_date": "2025-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ip: Node ip SSRF"
    },
    {
      "cve": "CVE-2025-64718",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "discovery_date": "2025-11-13T16:01:24.744054+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2414854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A prototype pollution flaw has been discovered in the js-yaml npm library. It\u0027s possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (__proto__). All users who parse untrusted yaml documents may be impacted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml prototype pollution in merge",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "RHBZ#2414854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64718",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64718",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879",
          "url": "https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m"
        }
      ],
      "release_date": "2025-11-13T15:32:44.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml prototype pollution in merge"
    },
    {
      "cve": "CVE-2025-64756",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2025-11-17T18:01:28.077927+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2415451"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glob. This vulnerability allows arbitrary command execution via processing files with malicious names when the glob command-line interface (CLI) is used with the -c/--cmd option, enabling shell metacharacters to trigger command injection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glob: glob: Command Injection Vulnerability via Malicious Filenames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in glob allows arbitrary command execution when the `glob` command-line interface is used with the `-c/--cmd` option to process files with malicious names. The vulnerability is triggered by shell metacharacters in filenames, leading to command injection. The glob CLI tool utilizes the -c option to execute shell commands over the files which matched the searched pattern by using the shell:true parameter when creating the subprocess which will further execute the command informed via \u0027-c\u0027 option, this parameter allows the shell meta characters to be used and processed when executing the command. Given that information glob misses to sanitize the file name to eliminate such characters and expressions from the filename, leading to code execution as when performing the shell expansion such characters will be interpreted as shell commands.\n\nTo exploit this vulnerability the targeted system should run the glob CLI over a file with a maliciously crafted filename, additionally the attacker needs to have enough permission to create such file or trick the user to download and process the required file with the glob CLI.\n\nThis flaw is present in the command line interface of the nodejs-glob package. When the package is used by npm, the command line interface is not used at all, so it cannot be triggered. However, the command line interface implementation is still present on the system, but not directly exposed to the user\u0027s $PATH. To reflect this condition, nodejs packages have been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "RHBZ#2415451",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415451"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64756",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64756",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146",
          "url": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2",
          "url": "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2"
        }
      ],
      "release_date": "2025-11-17T17:29:08.029000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid using the `glob` command-line interface with the `-c` or `--cmd` option when processing filenames from untrusted sources. If programmatic use of `glob` is necessary, ensure that filenames are thoroughly sanitized before being passed to commands executed with shell interpretation enabled.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames"
    },
    {
      "cve": "CVE-2026-50152",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-08-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contains sensitive operational secrets including OSD LUKS disk encryption passphrases and, on clusters managed by cephadm, the SSH private key used to administer every host. Exposure of these secrets can lead to full host-level root access and compromise of encrypted data at rest.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX users",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it can be exploited from the adjacent cluster network with low-privilege CephX credentials and no user interaction. Successful exploitation allows an attacker to read the full MON config-key store, exposing OSD LUKS passphrases and cephadm SSH private keys, potentially yielding root access on all cluster hosts. The vulnerability\u0027s root cause is missing authorization checks in the MON subscription handler when serving config-key store contents.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50152"
        }
      ],
      "release_date": "2026-08-19T17:57:46+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-15T10:30:05+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:83548"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:017c64392c1a85ba5726cd2af371903a0e4de67e4c0b421a3f35cdf2f74e825b_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:7ddde3e05da2669f50aa06bc3431c0db1a81b0a31dde4e0a03eeebd6b2957b49_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9855523cf71d68a3f6d04db0d7cd57dd811549db83cea9b48b340dbc8cecfeb5_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4a2e971e0c6abe92b23ec9738045428991d07aa2addb7545bf5dfaa0b09b43bd_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:532555a28cb1076f5a802c239888290e49d25bb20247e21fc33820a5382cf215_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:f493172ce07a31e3c04a11d7c37908fb03e7e599170405ea1838ddfc186209e7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:2095d6e6b73d50fcdbacc6d5e5ba8b0d5fcdfea807705730d2715a1eff2bf15d_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:6efa0ffa477dfbf006f96eb7d0d7936f78d135046a33649552a94ddca0861d91_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7609dc4e02f90e9c89d17115bd38f8b3edf9bca32f175260478f9030d6768cdc_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:79282e7ddb26960c70987a984bb71901e78c8cfbd2b58d567260086d326935df_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:99978e522614cd3e65593c41b80589ba9d0d1e8df5398ac65087922a76cb63b3_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:c889df6f36876ed697ed65a3e4b70c9496288f8ccd148481022f3ba544f099b6_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:0da5db7378e70afc3231c603a7627dd2d7fb4f9c4607f3e34a79f2b3274b5a26_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:6a7590ca91e50888726791d5b386bdd29bc582f8379d58f3727464d8e89ddd4d_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ce8179276493d3845620d31e74989f0411a0aa18d045d02de515e7d0ac8a3076_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:0e608f9523ab775a4988a2dbf01a152b148b4a5c2bd48c79d9d70f9ad2c9a196_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:881786268dad82c7cd82b94d34f6004213417ffd681727be34e3d878bf802a88_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:c5a1d0b24dc05c48c5087f7143e251d7f91e10c3ff7900136f8fec9ede6207eb_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX users"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.