RHSA-2026:95360

Vulnerability from csaf_redhat - Published: 2026-11-04 21:45 - Updated: 2026-11-06 19:26
Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update
Severity
Important
Notes
Topic: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Security Fix(es): * dompurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978) * immutable-js: Denial of Service due to mishandling of large index values in List operations (CVE-2026-59879) * qs: Denial of Service via improper validation in stringify function (CVE-2026-82417) * golang.org/x/image/tiff: Denial of Service via invalid TIFF image (CVE-2026-46604) * golang.org/x/image/vp8l: Denial of Service via excessive memory allocation (CVE-2026-46603) * github.com/apache/thrift: Denial of Service via unbounded recursion in Go transports (CVE-2026-83663) * github.com/apache/thrift: Denial of Service via improper handling of compressed data (CVE-2026-94637) * github.com/apache/thrift: Arbitrary code execution via heap-based buffer overflow during frame compression (CVE-2026-91135) * golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write (CVE-2026-39834) * Golang html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * Golang encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * Golang net/http: golang.org/x/net/http2: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * go.mongodb.org/mongo-driver: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs (CVE-2026-88031) * google.golang.org/grpc: Denial of Service via malformed RPC requests (CVE-2026-84445) * brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns (CVE-2026-102276) * proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet (CVE-2026-90711) * handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) (CVE-2026-106446) * handlebars: JavaScript Injection via Own Property Check Bypass (CVE-2026-106445) * brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns (CVE-2026-102278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64 —
Workaround
Threats
Impact Important
CVE-2026-39834

A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64 —
Threats
Impact Moderate
CVE-2026-46603

A flaw was found in golang.org/x/image/vp8l. A remote attacker can cause a denial of service by providing a specially crafted VP8L image. This image, containing many unused Huffman tree groups, leads to excessive memory allocation during VP8L decoding, resulting in memory exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-46604

A flaw was found in the golang.org/x/image/tiff component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing a specially crafted, invalid TIFF image. When the TIFF decoder attempts to process an image with an out-of-bounds strip offset, it can panic, leading to the unavailability of the affected system.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Moderate
CVE-2026-49978

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `<template>.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation
Affected products
Fixed 2 products, the same list as for CVE-2026-39834
Known not affected 18 products, the same list as for CVE-2026-39834
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-59879

A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 2 products, the same list as for CVE-2026-39834
Known not affected 18 products, the same list as for CVE-2026-39834
Threats
Impact Moderate
CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-39834
Known not affected 18 products, the same list as for CVE-2026-39834
Threats
Impact Important
CVE-2026-82417

A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64 —
Workaround
Threats
Impact Important
CVE-2026-83663

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network frames with zero payload bytes to an affected Go service. When processing these empty frames, the transport recursively calls its read function rather than iterating in a loop, exhausting the execution stack. This stack exhaustion causes an unrecoverable fatal error that terminates the entire process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64 —
Threats
Impact Important
CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version < 1.17.10 and < 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-90711

A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this vulnerability by submitting a forged X-Forwarded-For header to spoof their client IP address. This flaw allows attackers to bypass IP-based access controls, rate limiting, and audit logging.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-290 - Authentication Bypass by Spoofing
Affected products
Fixed 2 products, the same list as for CVE-2026-82417
Known not affected 18 products, the same list as for CVE-2026-82417
Threats
Impact Important
CVE-2026-91135

A flaw was found in Apache Thrift. A remote attacker can exploit a heap-based buffer overflow in the C++ transport component to achieve arbitrary code execution or cause a Denial of Service (DoS) through an application crash. The vulnerability occurs when an application enables compression transforms on outbound message frames and processes incompressible input provided by an untrusted peer. When the data expands during compression, it is copied into a memory buffer without adequate boundary validation, resulting in data being written outside the allocated memory limits.

7.0 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-94637

A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leading to a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-102276

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-82417
Known not affected 18 products, the same list as for CVE-2026-82417
Threats
Impact Important
CVE-2026-102278

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-82417
Known not affected 18 products, the same list as for CVE-2026-82417
Threats
Impact Important
CVE-2026-106445

A flaw was found in Handlebars. The lookupProperty own-property check returns Function.prototype.constructor before the prototype-method deny list is applied. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template context, arbitrary JavaScript can execute with the application process privileges.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-184 - Incomplete List of Disallowed Inputs
Affected products
Fixed 2 products, the same list as for CVE-2026-82417
Known not affected 18 products, the same list as for CVE-2026-82417
Threats
Impact Important
CVE-2026-106446

A flaw was found in Handlebars. Incomplete validation of pre-parsed AST objects passed to compile() or precompile() allows unchecked AST fields to be emitted into generated JavaScript. An attacker who can supply an object instead of a template string can inject and execute arbitrary JavaScript in the application process.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code
Affected products
Fixed 2 products, the same list as for CVE-2026-82417
Known not affected 18 products, the same list as for CVE-2026-82417
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:95360 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2480676 external
https://bugzilla.redhat.com/show_bug.cgi?id=2493766 external
https://bugzilla.redhat.com/show_bug.cgi?id=2498158 external
https://bugzilla.redhat.com/show_bug.cgi?id=2500695 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://bugzilla.redhat.com/show_bug.cgi?id=2516086 external
https://bugzilla.redhat.com/show_bug.cgi?id=2525936 external
https://bugzilla.redhat.com/show_bug.cgi?id=2531587 external
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://bugzilla.redhat.com/show_bug.cgi?id=2533602 external
https://bugzilla.redhat.com/show_bug.cgi?id=2542700 external
https://bugzilla.redhat.com/show_bug.cgi?id=2542707 external
https://bugzilla.redhat.com/show_bug.cgi?id=2545013 external
https://bugzilla.redhat.com/show_bug.cgi?id=2545152 external
https://bugzilla.redhat.com/show_bug.cgi?id=2545170 external
https://bugzilla.redhat.com/show_bug.cgi?id=2547112 external
https://bugzilla.redhat.com/show_bug.cgi?id=2547120 external
https://bugzilla.redhat.com/show_bug.cgi?id=2548344 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-39834 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480676 external
https://www.cve.org/CVERecord?id=CVE-2026-39834 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39834 external
https://go.dev/cl/781663 external
https://go.dev/issue/79567 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5020 external
https://access.redhat.com/security/cve/CVE-2026-46603 self
https://bugzilla.redhat.com/show_bug.cgi?id=2516086 external
https://www.cve.org/CVERecord?id=CVE-2026-46603 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46603 external
https://go.dev/cl/793460 external
https://go.dev/issue/80069 external
https://pkg.go.dev/vuln/GO-2026-6222 external
https://access.redhat.com/security/cve/CVE-2026-46604 self
https://bugzilla.redhat.com/show_bug.cgi?id=2493766 external
https://www.cve.org/CVERecord?id=CVE-2026-46604 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46604 external
https://go.dev/cl/788421 external
https://go.dev/issue/80122 external
https://pkg.go.dev/vuln/GO-2026-5066 external
https://access.redhat.com/security/cve/CVE-2026-49978 self
https://bugzilla.redhat.com/show_bug.cgi?id=2500695 external
https://www.cve.org/CVERecord?id=CVE-2026-49978 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49978 external
https://github.com/cure53/DOMPurify/commit/ca30f0… external
https://github.com/cure53/DOMPurify/releases/tag/3.4.7 external
https://github.com/cure53/DOMPurify/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-59879 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498158 external
https://www.cve.org/CVERecord?id=CVE-2026-59879 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59879 external
https://github.com/immutable-js/immutable-js/comm… external
https://github.com/immutable-js/immutable-js/comm… external
https://github.com/immutable-js/immutable-js/rele… external
https://github.com/immutable-js/immutable-js/rele… external
https://github.com/immutable-js/immutable-js/secu… external
https://access.redhat.com/security/cve/CVE-2026-78669 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344 external
https://www.cve.org/CVERecord?id=CVE-2026-78669 external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669 external
https://go.dev/cl/847186 external
https://go.dev/cl/847308 external
https://go.dev/issue/81742 external
https://groups.google.com/g/golang-announce/c/U2f… external
https://groups.google.com/g/golang-announce/c/ZPw… external
https://pkg.go.dev/vuln/GO-2026-6611 external
https://access.redhat.com/security/cve/CVE-2026-82417 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525936 external
https://www.cve.org/CVERecord?id=CVE-2026-82417 external
https://nvd.nist.gov/vuln/detail/CVE-2026-82417 external
https://github.com/ljharb/qs/commit/e83d321ffafb3… external
https://github.com/ljharb/qs/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-83663 self
https://bugzilla.redhat.com/show_bug.cgi?id=2545170 external
https://www.cve.org/CVERecord?id=CVE-2026-83663 external
https://nvd.nist.gov/vuln/detail/CVE-2026-83663 external
https://lists.apache.org/thread/33otcgbqd27wf6qq8… external
https://lists.apache.org/thread/yjz317wq7h86q9k8w… external
https://access.redhat.com/security/cve/CVE-2026-84445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://www.cve.org/CVERecord?id=CVE-2026-84445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445 external
https://github.com/grpc/grpc-go/commit/3822494d8e… external
https://github.com/grpc/grpc-go/commit/8668b69c16… external
https://github.com/grpc/grpc-go/commit/93e31b4854… external
https://github.com/grpc/grpc-go/issues/9354 external
https://github.com/grpc/grpc-go/pull/9365 external
https://github.com/grpc/grpc-go/pull/9366 external
https://github.com/grpc/grpc-go/pull/9367 external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2 external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2 external
https://github.com/grpc/grpc-go/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-88031 self
https://bugzilla.redhat.com/show_bug.cgi?id=2531587 external
https://www.cve.org/CVERecord?id=CVE-2026-88031 external
https://nvd.nist.gov/vuln/detail/CVE-2026-88031 external
https://jira.mongodb.org/browse/GODRIVER-4081 external
https://www.mongodb.com/community/forums/t/mongod… external
https://access.redhat.com/security/cve/CVE-2026-90711 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533602 external
https://www.cve.org/CVERecord?id=CVE-2026-90711 external
https://nvd.nist.gov/vuln/detail/CVE-2026-90711 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/jshttp/proxy-addr/security/adv… external
https://access.redhat.com/security/cve/CVE-2026-91135 self
https://bugzilla.redhat.com/show_bug.cgi?id=2545013 external
https://www.cve.org/CVERecord?id=CVE-2026-91135 external
https://nvd.nist.gov/vuln/detail/CVE-2026-91135 external
https://lists.apache.org/thread/rbpwlhlxnv2qgyk8c… external
https://access.redhat.com/security/cve/CVE-2026-94637 self
https://bugzilla.redhat.com/show_bug.cgi?id=2545152 external
https://www.cve.org/CVERecord?id=CVE-2026-94637 external
https://nvd.nist.gov/vuln/detail/CVE-2026-94637 external
https://lists.apache.org/thread/6hxll1jcnod9gfr22… external
https://access.redhat.com/security/cve/CVE-2026-102276 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542707 external
https://www.cve.org/CVERecord?id=CVE-2026-102276 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102276 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-102278 self
https://bugzilla.redhat.com/show_bug.cgi?id=2542700 external
https://www.cve.org/CVERecord?id=CVE-2026-102278 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102278 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-106445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2547112 external
https://www.cve.org/CVERecord?id=CVE-2026-106445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-106445 external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-106446 self
https://bugzilla.redhat.com/show_bug.cgi?id=2547120 external
https://www.cve.org/CVERecord?id=CVE-2026-106446 external
https://nvd.nist.gov/vuln/detail/CVE-2026-106446 external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* dompurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978)\n* immutable-js: Denial of Service due to mishandling of large index values in List operations (CVE-2026-59879)\n* qs: Denial of Service via improper validation in stringify function (CVE-2026-82417)\n* golang.org/x/image/tiff: Denial of Service via invalid TIFF image (CVE-2026-46604)\n* golang.org/x/image/vp8l: Denial of Service via excessive memory allocation (CVE-2026-46603)\n* github.com/apache/thrift: Denial of Service via unbounded recursion in Go transports (CVE-2026-83663)\n* github.com/apache/thrift: Denial of Service via improper handling of compressed data (CVE-2026-94637)\n* github.com/apache/thrift: Arbitrary code execution via heap-based buffer overflow during frame compression (CVE-2026-91135)\n* golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write (CVE-2026-39834)\n* Golang html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)\n* Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)\n* Golang encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)\n* Golang net/http: golang.org/x/net/http2: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)\n* go.mongodb.org/mongo-driver: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs (CVE-2026-88031)\n* google.golang.org/grpc: Denial of Service via malformed RPC requests (CVE-2026-84445)\n* brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns (CVE-2026-102276)\n* proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet (CVE-2026-90711)\n* handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) (CVE-2026-106446)\n* handlebars: JavaScript Injection via Own Property Check Bypass (CVE-2026-106445)\n* brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns (CVE-2026-102278)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:95360",
        "url": "https://access.redhat.com/errata/RHSA-2026:95360"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2480676",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
      },
      {
        "category": "external",
        "summary": "2493766",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493766"
      },
      {
        "category": "external",
        "summary": "2498158",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158"
      },
      {
        "category": "external",
        "summary": "2500695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
      },
      {
        "category": "external",
        "summary": "2515815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
      },
      {
        "category": "external",
        "summary": "2515838",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
      },
      {
        "category": "external",
        "summary": "2515839",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
      },
      {
        "category": "external",
        "summary": "2516086",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516086"
      },
      {
        "category": "external",
        "summary": "2525936",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
      },
      {
        "category": "external",
        "summary": "2531587",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531587"
      },
      {
        "category": "external",
        "summary": "2533175",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
      },
      {
        "category": "external",
        "summary": "2533602",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533602"
      },
      {
        "category": "external",
        "summary": "2542700",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542700"
      },
      {
        "category": "external",
        "summary": "2542707",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542707"
      },
      {
        "category": "external",
        "summary": "2545013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545013"
      },
      {
        "category": "external",
        "summary": "2545152",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545152"
      },
      {
        "category": "external",
        "summary": "2545170",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545170"
      },
      {
        "category": "external",
        "summary": "2547112",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547112"
      },
      {
        "category": "external",
        "summary": "2547120",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547120"
      },
      {
        "category": "external",
        "summary": "2548344",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95360.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
    "tracking": {
      "current_release_date": "2026-11-06T19:26:58+00:00",
      "generator": {
        "date": "2026-11-06T19:26:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:95360",
      "initial_release_date": "2026-11-04T21:45:54+00:00",
      "revision_history": [
        {
          "date": "2026-11-04T21:45:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-04T21:45:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-06T19:26:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4 on RHEL 9",
                "product": {
                  "name": "Cryostat 4 on RHEL 9",
                  "product_id": "9Base-Cryostat-4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-29"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-18"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-29"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-28"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-19"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-29"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-19"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-18"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-29"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-28"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-19"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39834",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-22T04:01:15.681060+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480676"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having a Moderate impact because triggering the condition requires transmitting an unchunked payload exceeding 4GB in a single operation across an SSH channel, which represents an atypical pattern in standard deployments. In typical Red Hat environments and containerized applications consuming this Go package, network communications and data transfers are handled in significantly smaller buffers, substantially limiting realistic exposure. In the event of exploitation, the blast radius is restricted to process hang and denial of service via an infinite loop, without compromising system confidentiality or data integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480676",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39834",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781663",
          "url": "https://go.dev/cl/781663"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79567",
          "url": "https://go.dev/issue/79567"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5020",
          "url": "https://pkg.go.dev/vuln/GO-2026-5020"
        }
      ],
      "release_date": "2026-05-22T02:31:27.540000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
    },
    {
      "cve": "CVE-2026-46603",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-14T16:52:23.589113+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2516086"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/image/vp8l. A remote attacker can cause a denial of service by providing a specially crafted VP8L image. This image, containing many unused Huffman tree groups, leads to excessive memory allocation during VP8L decoding, resulting in memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image/vp8l: golang.org/x/image/vp8l: Denial of Service via excessive memory allocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw due to the potential for a remote attacker to trigger a denial of service. By providing a specially crafted VP8L image, an attacker can exploit a vulnerability in `golang.org/x/image/vp8l` that causes excessive memory allocation, leading to memory exhaustion in applications processing these images. This could impact the availability of services utilizing the affected component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2516086",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516086"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46603"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/793460",
          "url": "https://go.dev/cl/793460"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80069",
          "url": "https://go.dev/issue/80069"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6222",
          "url": "https://pkg.go.dev/vuln/GO-2026-6222"
        }
      ],
      "release_date": "2026-08-14T16:38:16.879000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/image/vp8l: golang.org/x/image/vp8l: Denial of Service via excessive memory allocation"
    },
    {
      "cve": "CVE-2026-46604",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-06-26T21:05:50.463844+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493766"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the golang.org/x/image/tiff component. This vulnerability allows a remote attacker to cause a denial of service (DoS) by providing a specially crafted, invalid TIFF image. When the TIFF decoder attempts to process an image with an out-of-bounds strip offset, it can panic, leading to the unavailability of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the golang.org/x/image/tiff package. The TIFF decoder does not validate strip offsets read from a TIFF Image File Directory (IFD) before dereferencing them. Processing a specially crafted, invalid TIFF image with an out-of-bounds strip offset triggers a runtime panic, causing a denial of service in any application that decodes attacker-supplied TIFF images, such as thumbnail generators, document processors, or image upload handlers. Exploitation requires the application to decode a malicious TIFF file supplied by the attacker (CVSS UI:R); there is no impact to confidentiality or integrity, only availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493766",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493766"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/788421",
          "url": "https://go.dev/cl/788421"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80122",
          "url": "https://go.dev/issue/80122"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5066",
          "url": "https://pkg.go.dev/vuln/GO-2026-5066"
        }
      ],
      "release_date": "2026-06-26T20:22:46.377000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "There is no complete inline mitigation for this issue; the fix requires upgrading golang.org/x/image to version 0.43.0 or later, which validates the strip offset before use. Where an immediate upgrade is not possible, exposure can be reduced by not decoding untrusted or externally supplied TIFF images, or by isolating TIFF decoding in a sandboxed, restartable worker process so a panic does not crash the primary service.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image"
    },
    {
      "cve": "CVE-2026-49978",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation"
      },
      "discovery_date": "2026-07-14T21:05:26.253019+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `\u003ctemplate\u003e.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        }
      ],
      "release_date": "2026-07-14T20:02:46.263000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-59879",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-07-08T17:02:16.432203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498158"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact denial of service vulnerability in Immutable.js affects Red Hat products that process untrusted input through List operations. An attacker can trigger an infinite loop or unbounded memory allocation by providing specially crafted large index values, leading to a service disruption. Additionally, silent data corruption may occur due to integer wrapping.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59879"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498158",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59879",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84",
          "url": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a",
          "url": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735",
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735"
        }
      ],
      "release_date": "2026-07-08T15:47:24.885000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications should implement input validation to reject or clamp any externally supplied List index or key-path segment that exceeds a sane maximum, specifically values greater than or equal to 2^30. Additionally, running request handling in isolated worker processes with capped heap sizes (e.g., using `--max-old-space-size`) can contain the impact of a potential process abort.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-82417",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-08-30T00:00:50.379994+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525936"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object\u0027s constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qs: qs: Denial of Service via improper validation in stringify function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A denial of service vulnerability was found in the qs package for Node.js. The stringify function does not verify that constructor.isBuffer is callable before invoking it. An attacker who can influence object shape, for example through query parameters parsed with allowPrototypes: true as Express 4 does by default, can cause qs.stringify to throw a TypeError when that data is re-serialized. In typical Node.js HTTP frameworks the error is caught per request and returns HTTP 500. In code paths without an error boundary, such as async handlers or background jobs, the process may exit.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525936",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-82417",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417"
        },
        {
          "category": "external",
          "summary": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6",
          "url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g",
          "url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
        }
      ],
      "release_date": "2026-08-29T23:51:27.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "If an immediate upgrade to qs 6.16.0 is not feasible, avoid re-serializing attacker-influenced parsed query or body objects with qs.stringify. Where qs.parse is used directly, set allowPrototypes: false unless prototype keys are required. For Express applications, review whether the default query parser configuration is necessary. Wrapping qs.stringify calls in try/catch can limit impact to individual requests.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "qs: qs: Denial of Service via improper validation in stringify function"
    },
    {
      "cve": "CVE-2026-83663",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-02T12:58:05.145390+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545170"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network frames with zero payload bytes to an affected Go service. When processing these empty frames, the transport recursively calls its read function rather than iterating in a loop, exhausting the execution stack. This stack exhaustion causes an unrecoverable fatal error that terminates the entire process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because a remote attacker can send crafted requests to an affected Go Apache Thrift service and cause excessive recursion in transport handling, resulting in denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-83663"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545170",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545170"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-83663",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-83663"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83663",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83663"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
          "url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/yjz317wq7h86q9k8ws6ton0ojgl8hjct",
          "url": "https://lists.apache.org/thread/yjz317wq7h86q9k8ws6ton0ojgl8hjct"
        }
      ],
      "release_date": "2026-10-02T12:18:16.955000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-88031",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-09-10T18:11:27.321656+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531587"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go.mongodb.org/mongo-driver for version \u003c 1.17.10 and \u003c 2.9.1. \nImproper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the MongoDB Go Driver. The GridFS component does not properly sanitize caller-supplied file identifiers before using them in database queries. A structured document passed as a file ID (for example, a BSON document containing query operators) is interpreted as a query condition rather than a literal match value. An authenticated attacker who can influence the file identifier passed to GridFS operations such as Delete, DownloadToStream, or OpenDownloadStream in an affected application can exploit this to delete all chunks in a GridFS bucket, resulting in permanent data loss and denial of service.\nThe practical impact depends on whether the product\u0027s code passes externally-controlled values as GridFS file identifiers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531587",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531587"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-88031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://jira.mongodb.org/browse/GODRIVER-4081",
          "url": "https://jira.mongodb.org/browse/GODRIVER-4081"
        },
        {
          "category": "external",
          "summary": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342",
          "url": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342"
        }
      ],
      "release_date": "2026-09-10T17:59:35.845000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "If upgrading go.mongodb.org/mongo-driver to version 1.17.10 (v1) or 2.9.1 (v2) is not immediately possible, the following steps can reduce exposure:\n- Validate file identifiers before passing them to GridFS operations. Ensure that file IDs supplied by users or external systems are scalar values (e.g., primitive.ObjectID or string) and reject any structured BSON documents or maps. This prevents query operator injection.\n- Restrict who can supply GridFS file identifiers. Do not allow unauthenticated or low-privilege users to directly control the file ID parameter in GridFS API calls (Delete, OpenDownloadStream, DownloadToStream, etc.).",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs"
    },
    {
      "cve": "CVE-2026-90711",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2026-09-15T06:41:11.029083+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533602"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this vulnerability by submitting a forged X-Forwarded-For header to spoof their client IP address. This flaw allows attackers to bypass IP-based access controls, rate limiting, and audit logging.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because unauthenticated remote attackers can spoof client IP addresses and circumvent security controls, such as rate limits or network access lists, by sending custom forwarding headers. Exploitation is contingent on application configurations that define reverse proxy trust subnets using IPv4-mapped IPv6 notation with short IPv4 prefix lengths. Environments configuring trusted proxies via canonical IPv4 CIDR blocks, hostnames, or default loopback addresses are not vulnerable to this behavior.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533602",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533602"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-90711",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90711",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90711"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h",
          "url": "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h"
        }
      ],
      "release_date": "2026-09-15T06:19:46.332000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw through configuration:\n\n1. Configure trusted proxy definitions using standard IPv4 notation (such as `10.0.0.0/8`) rather than IPv4-mapped IPv6 notation.\n2. If IPv4-mapped IPv6 notation is required, set the subnet prefix length to at least 97 to cover the mapped boundary (for example, specify `::ffff:10.0.0.0/104` instead of `::ffff:10.0.0.0/8`).\n3. Alternatively, sanitize or strip incoming `X-Forwarded-For` headers at edge load balancers or boundary reverse proxies before passing traffic to backend applications.\n\nWarning: Modifying application configuration files requires restarting the Node.js application service, which will temporarily interrupt service availability and active connections.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet"
    },
    {
      "cve": "CVE-2026-91135",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-10-02T10:40:59.608917+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545013"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. A remote attacker can exploit a heap-based buffer overflow in the C++ transport component to achieve arbitrary code execution or cause a Denial of Service (DoS) through an application crash. The vulnerability occurs when an application enables compression transforms on outbound message frames and processes incompressible input provided by an untrusted peer. When the data expands during compression, it is copied into a memory buffer without adequate boundary validation, resulting in data being written outside the allocated memory limits.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: Apache Thrift: Arbitrary code execution via heap-based buffer overflow during frame compression",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate impact because successful exploitation requires non-default transport configuration and specific payload characteristics to trigger memory corruption over the network. The issue specifically resides within the C++ implementation of Apache Thrift when outbound frame compression using ZLIB is explicitly activated. Deployments utilizing default framing mechanisms or non-C++ bindings do not encounter this boundary checking failure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-91135"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545013",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545013"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-91135",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-91135"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91135",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91135"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
          "url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/rbpwlhlxnv2qgyk8cfscp2d2fd3p0ojb",
          "url": "https://lists.apache.org/thread/rbpwlhlxnv2qgyk8cfscp2d2fd3p0ojb"
        }
      ],
      "release_date": "2026-10-02T10:28:50.745000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: Apache Thrift: Arbitrary code execution via heap-based buffer overflow during frame compression"
    },
    {
      "cve": "CVE-2026-94637",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-10-02T12:32:24.490602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2545152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact because a remote attacker can send crafted ZLIB-transformed frames to an affected Go Apache Thrift service, causing resource exhaustion and denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-94637"
        },
        {
          "category": "external",
          "summary": "RHBZ#2545152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-94637",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-94637"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-94637",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94637"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
          "url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/6hxll1jcnod9gfr225tz7my08lpj3jmt",
          "url": "https://lists.apache.org/thread/6hxll1jcnod9gfr225tz7my08lpj3jmt"
        }
      ],
      "release_date": "2026-10-02T11:49:02.869000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data"
    },
    {
      "cve": "CVE-2026-102276",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-28T21:02:20.910434+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542707"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this vulnerability as Important because an unauthenticated remote attacker can crash running Node.js services by submitting malformed pattern strings, resulting in a denial of service. In Red Hat environments, applications that accept arbitrary glob or expansion patterns from external inputs are susceptible to unexpected termination due to an unhandled call stack overflow. While this flaw allows service interruption without requiring privileges, it does not lead to code execution or compromise data confidentiality and integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102276"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542707",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542707"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102276",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102276"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102276",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102276"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",
          "url": "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c",
          "url": "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc",
          "url": "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3",
          "url": "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"
        }
      ],
      "release_date": "2026-09-28T20:50:59.984000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns"
    },
    {
      "cve": "CVE-2026-102278",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-28T21:00:55.949756+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2542700"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because remote unauthenticated attackers can supply crafted nested expressions to trigger native stack exhaustion and crash server-side processes, resulting in a denial of service without compromising system confidentiality or integrity. In Red Hat environments, the affected library is distributed across containerized web consoles, developer tools, and Node.js runtime environments. Exploitation is constrained to deployments where applications process untrusted, user-defined pattern inputs directly through expansion functions without input depth validation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102278"
        },
        {
          "category": "external",
          "summary": "RHBZ#2542700",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542700"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102278",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102278"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
          "url": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
          "url": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"
        }
      ],
      "release_date": "2026-09-28T20:57:09.850000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns"
    },
    {
      "cve": "CVE-2026-106445",
      "cwe": {
        "id": "CWE-184",
        "name": "Incomplete List of Disallowed Inputs"
      },
      "discovery_date": "2026-10-06T19:53:31.823614+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547112"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Handlebars. The lookupProperty own-property check returns Function.prototype.constructor before the prototype-method deny list is applied. When an attacker can render a controlled template with allowProtoMethodsByDefault enabled and an accessible function in the template context, arbitrary JavaScript can execute with the application process privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact. Exploitation requires rendering a controlled template with allowProtoMethodsByDefault set to true (off by default) and an accessible function in the template context, allowing bypass of the constructor deny list via Function.prototype. The issue is not Critical for Red Hat scoring because those non-default runtime conditions raise attack complexity (AC:H); default Handlebars configurations that keep allowProtoMethodsByDefault disabled are not exploitable for this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547112",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547112"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106445"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa",
          "url": "https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/pull/2185",
          "url": "https://github.com/handlebars-lang/handlebars.js/pull/2185"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10",
          "url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f",
          "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-p8wg-vrv2-v86f"
        }
      ],
      "release_date": "2026-10-06T19:39:08.916000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Do not set allowProtoMethodsByDefault to true when compiling or rendering untrusted templates or untrusted data.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass"
    },
    {
      "cve": "CVE-2026-106446",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code"
      },
      "discovery_date": "2026-10-06T19:54:41.180764+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547120"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Handlebars. Incomplete validation of pre-parsed AST objects passed to compile() or precompile() allows unchecked AST fields to be emitted into generated JavaScript. An attacker who can supply an object instead of a template string can inject and execute arbitrary JavaScript in the application process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact. Exploitation requires an application to pass a non-string object (for example, a JSON-deserialized value) to Handlebars.compile() or Handlebars.precompile(). Applications that only pass template strings are not affected. When that unsafe calling pattern is present, injected JavaScript can run with the privileges of the Node.js process. The issue is not Critical for Red Hat scoring because successful exploitation depends on that non-default API usage condition (AC:H), not on typical string-template pipelines alone.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106446"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547120",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547120"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106446",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106446"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106446",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106446"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2",
          "url": "https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/pull/2185",
          "url": "https://github.com/handlebars-lang/handlebars.js/pull/2185"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10",
          "url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj",
          "url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-8r5x-fm3f-whwj"
        }
      ],
      "release_date": "2026-10-06T19:41:55.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-04T21:45:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95360"
        },
        {
          "category": "workaround",
          "details": "Upgrade to Handlebars 4.7.10 or later. Ensure only strings are passed to Handlebars.compile() and Handlebars.precompile(); reject non-string inputs. If templates are precompiled at build time, prefer the runtime-only build (handlebars/runtime) so compile() is unavailable on the server.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:70670befce83fe0b5c952944f3ce605cd28dd2748ee684457ef4ace109ee574b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:dd5223d7e14825ce9a763e5897c590d81ad7628d39d5df32a83525eed4a7eaaf_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:03cfb6cf1c6f79d972e3e60ec8253e284673429bce9d51e42031efe6c109fc5b_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:f55f9d56d92278721078e2e30fb2bbb6fe37c13ef7ba889e97c52fb7cf7e305d_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:72044555bcb7c9f99fccb9295216358eedbd35cb1af93619a23def2f8781e21f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:b4e295b5e8244f1eec07302bbdf180d00939350e2812d43a812482a72a39727d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:cc675e69e1dd2824967a36391a252a1eba48a7d40a0e7147cc000925d6ff15b2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f84432eb24357082edf7a0bbff2cdf196e9ff63200d230a135704156c8529c05_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:5cc69c73aec0b1bf41c5463bb301c3c8ca3e92a6692f1c3033dab457d540541f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:a888454a617e9bc4da0576910e5e427f8402b7c81c1544f42a314bf1336d9c39_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:38fbd37ac48a98540273b354294e7ba08fa3cbbf5914a66fb563ed96f53ef681_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:7ba11260b30778522542660ae262a22d5aac59a34c8c29286ead4535720652cc_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:1af2938db225959f0672150b999fd6b43f11db48db16651ec395dca304830063_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:9fd13fcc7d3b038b4afe04fa488e7e9e8dfb23398d445bb5571401eecb1848ef_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:83a69191d356f8f87b5bd2e13a2e091f083b61ed6ed08a1f67c0f54426654c3e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:e87002a807cb976da35bf8d7fa34983164263228eb633204059edf28846f2b85_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f694d48d0ce96693e87760c26436c5f60888002aeb4c9cb8276a70cc87aa42f2_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:f7bfbf90b0dac7cb87324fb22c132d7dce437516be2a46debde536647b907f7b_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:c8cf4acf7a6fc1f858e8785dafd5cb3d103f0ed6db49151101d0746001719e6f_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:cca5ede1948dcb81597f269b99ccca83a13725e356e04e2007e001c05ddfa567_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.