RHSA-2026:95517

Vulnerability from csaf_redhat - Published: 2026-11-05 11:40 - Updated: 2026-11-13 16:45
Summary
Red Hat Security Advisory: Multicluster Global Hub 1.7.4 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.7.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-14199

On instances using Auth Proxy header authentication ([auth.proxy]) with identity caching enabled (sync_ttl > 0), two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged user's cached session and act as that user for the duration of the cache TTL. Default configurations are not affected.

7.1 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
CWE-639 - Authorization Bypass Through User-Controlled Key
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64 —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le —
Workaround
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64 —
Workaround
Threats
Impact Important
CVE-2026-15815

A flaw was found in Grafana. When extracting plugin archives, Grafana did not safely resolve symbolic links. A remote attacker could craft a malicious plugin archive with symbolic links to escape the plugin installation directory. This allows the attacker to write arbitrary files and execute malicious code with the privileges of the Grafana server process, leading to remote code execution.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-17183

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the `queryType` field, an attacker can execute queries against datasources they are not authorized to access, leading to the disclosure of sensitive data. This vulnerability arises from inconsistent query classification between authorization and execution paths.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-39834

A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Moderate
CVE-2026-42127

A flaw was found in Grafana. An unauthenticated attacker can exploit the public dashboard query endpoint by sending arbitrarily large JSON payloads. This vulnerability, caused by a lack of request body size limits, triggers excessive memory allocation, leading to a denial of service through memory exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-823 - Use of Out-of-range Pointer Offset
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-73501

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized access to protected resources that should require proper authentication, compromising the application's security.

9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-306 - Missing Authentication for Critical Functionality
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-73502

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the `openapi3filter.ValidateRequest` function. This occurs when validating a request against a `content` parameter whose `application/json` media type has no schema. Successful exploitation leads to a denial of service, causing request validation to panic and potentially resulting in an aborted request or a full process crash.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Moderate
CVE-2026-76905

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific error-rendering helpers to panic, leading to a Denial of Service (DoS). JSON request bodies and applications that do not use these error-rendering helpers are not affected.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Moderate
CVE-2026-77354

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an Out-of-Memory (OOM) error or a restart loop, effectively causing a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-77405

A flaw was found in RabbitMQ amqp091-go. The tlsConfigFromURI helper creates tls.Config values for amqps:// URIs without setting MinVersion. When the client is built with a Go toolchain whose default still permits TLS 1.0 or TLS 1.1, a network attacker who can influence TLS negotiation may force an obsolete protocol version and weaken protection of AMQP messages and credentials. The issue is fixed in amqp091-go 1.13.0 by requiring TLS 1.2 as the minimum.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-326 - Inadequate Encryption Strength
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-77411

RabbitMQ amqp091-go versions before 1.13.0 mishandle an oversized AMQP longstr field. A malicious or compromised broker can desynchronize message parsing, causing subsequent bytes to be interpreted as AMQP data and disrupting connection integrity or availability. Fixed in version 1.13.0.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64 —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le —
Vendor Fix fix
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64 —
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le —
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64 —
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64 —
Unresolved product id: Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x —
Threats
Impact Important
CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version < 1.17.10 and < 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-92542

A flaw was found in Moby. Firewall rules for encrypted Swarm overlay networks fail to distinguish between authentic kernel traffic and packets crafted by user processes. A local attacker can exploit this flaw by sending forged Virtual Extensible LAN (VXLAN) datagrams matching the overlay network configuration, causing the host to encrypt and route the traffic. This issue allows an attacker to inject unauthorized traffic into secure container networks, leading to network data tampering and a Denial of Service (DoS).

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-346 - Origin Validation Error
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
CVE-2026-92543

A flaw was found in Docker Engine. This vulnerability can lead to information disclosure or container image tampering by allowing an attacker to intercept unencrypted registry traffic. The flaw exists because the engine disables Transport Layer Security (TLS) certificate verification if any resolved address of a registry hostname matches a trusted local loopback network. A remote attacker capable of manipulating Domain Name System (DNS) responses can inject a loopback address alongside an external server address, tricking the client into connecting to an attacker-controlled registry over insecure HTTP.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-14199
Known not affected 17 products, the same list as for CVE-2026-14199
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:95517 self
https://access.redhat.com/security/cve/CVE-2026-14199 external
https://access.redhat.com/security/cve/CVE-2026-15815 external
https://access.redhat.com/security/cve/CVE-2026-17183 external
https://access.redhat.com/security/cve/CVE-2026-39834 external
https://access.redhat.com/security/cve/CVE-2026-42127 external
https://access.redhat.com/security/cve/CVE-2026-63209 external
https://access.redhat.com/security/cve/CVE-2026-73501 external
https://access.redhat.com/security/cve/CVE-2026-73502 external
https://access.redhat.com/security/cve/CVE-2026-76905 external
https://access.redhat.com/security/cve/CVE-2026-77354 external
https://access.redhat.com/security/cve/CVE-2026-77405 external
https://access.redhat.com/security/cve/CVE-2026-77411 external
https://access.redhat.com/security/cve/CVE-2026-84445 external
https://access.redhat.com/security/cve/CVE-2026-88031 external
https://access.redhat.com/security/cve/CVE-2026-92542 external
https://access.redhat.com/security/cve/CVE-2026-92543 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-14199 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521850 external
https://www.cve.org/CVERecord?id=CVE-2026-14199 external
https://nvd.nist.gov/vuln/detail/CVE-2026-14199 external
https://grafana.com/security/security-advisories/… external
https://access.redhat.com/security/cve/CVE-2026-15815 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527474 external
https://www.cve.org/CVERecord?id=CVE-2026-15815 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15815 external
https://access.redhat.com/security/cve/CVE-2026-17183 self
https://bugzilla.redhat.com/show_bug.cgi?id=2519801 external
https://www.cve.org/CVERecord?id=CVE-2026-17183 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17183 external
https://grafana.com/security/security-advisories/… external
https://access.redhat.com/security/cve/CVE-2026-39834 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480676 external
https://www.cve.org/CVERecord?id=CVE-2026-39834 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39834 external
https://go.dev/cl/781663 external
https://go.dev/issue/79567 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5020 external
https://access.redhat.com/security/cve/CVE-2026-42127 self
https://bugzilla.redhat.com/show_bug.cgi?id=2491449 external
https://www.cve.org/CVERecord?id=CVE-2026-42127 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42127 external
https://grafana.com/security/security-advisories/… external
https://access.redhat.com/security/cve/CVE-2026-63209 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543236 external
https://www.cve.org/CVERecord?id=CVE-2026-63209 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63209 external
https://github.com/klauspost/compress/commit/5392… external
https://github.com/klauspost/compress/releases/ta… external
https://github.com/klauspost/compress/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-73501 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515006 external
https://www.cve.org/CVERecord?id=CVE-2026-73501 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73501 external
https://github.com/getkin/kin-openapi/commit/f040… external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-73502 self
https://bugzilla.redhat.com/show_bug.cgi?id=2518119 external
https://www.cve.org/CVERecord?id=CVE-2026-73502 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73502 external
https://github.com/getkin/kin-openapi/commit/68ac… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-76905 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521202 external
https://www.cve.org/CVERecord?id=CVE-2026-76905 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76905 external
https://github.com/getkin/kin-openapi/commit/1d0a… external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-77354 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521204 external
https://www.cve.org/CVERecord?id=CVE-2026-77354 external
https://nvd.nist.gov/vuln/detail/CVE-2026-77354 external
https://github.com/getkin/kin-openapi/commit/1223… external
https://github.com/getkin/kin-openapi/pull/923 external
https://github.com/getkin/kin-openapi/releases/ta… external
https://github.com/getkin/kin-openapi/security/ad… external
https://access.redhat.com/security/cve/CVE-2026-77405 self
https://bugzilla.redhat.com/show_bug.cgi?id=2535502 external
https://www.cve.org/CVERecord?id=CVE-2026-77405 external
https://nvd.nist.gov/vuln/detail/CVE-2026-77405 external
https://github.com/rabbitmq/amqp091-go/commit/c9f… external
https://github.com/rabbitmq/amqp091-go/pull/355 external
https://github.com/rabbitmq/amqp091-go/releases/t… external
https://github.com/rabbitmq/amqp091-go/security/a… external
https://access.redhat.com/security/cve/CVE-2026-77411 self
https://bugzilla.redhat.com/show_bug.cgi?id=2535495 external
https://www.cve.org/CVERecord?id=CVE-2026-77411 external
https://nvd.nist.gov/vuln/detail/CVE-2026-77411 external
https://github.com/rabbitmq/amqp091-go/commit/143… external
https://github.com/rabbitmq/amqp091-go/pull/347 external
https://github.com/rabbitmq/amqp091-go/security/a… external
https://access.redhat.com/security/cve/CVE-2026-84445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://www.cve.org/CVERecord?id=CVE-2026-84445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445 external
https://github.com/grpc/grpc-go/commit/3822494d8e… external
https://github.com/grpc/grpc-go/commit/8668b69c16… external
https://github.com/grpc/grpc-go/commit/93e31b4854… external
https://github.com/grpc/grpc-go/issues/9354 external
https://github.com/grpc/grpc-go/pull/9365 external
https://github.com/grpc/grpc-go/pull/9366 external
https://github.com/grpc/grpc-go/pull/9367 external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2 external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2 external
https://github.com/grpc/grpc-go/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-88031 self
https://bugzilla.redhat.com/show_bug.cgi?id=2531587 external
https://www.cve.org/CVERecord?id=CVE-2026-88031 external
https://nvd.nist.gov/vuln/detail/CVE-2026-88031 external
https://jira.mongodb.org/browse/GODRIVER-4081 external
https://www.mongodb.com/community/forums/t/mongod… external
https://access.redhat.com/security/cve/CVE-2026-92542 self
https://bugzilla.redhat.com/show_bug.cgi?id=2547588 external
https://www.cve.org/CVERecord?id=CVE-2026-92542 external
https://nvd.nist.gov/vuln/detail/CVE-2026-92542 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-92543 self
https://bugzilla.redhat.com/show_bug.cgi?id=2547596 external
https://www.cve.org/CVERecord?id=CVE-2026-92543 external
https://nvd.nist.gov/vuln/detail/CVE-2026-92543 external
https://github.com/moby/moby/security/advisories/… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.7.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:95517",
        "url": "https://access.redhat.com/errata/RHSA-2026:95517"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14199",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14199"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15815",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15815"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-17183",
        "url": "https://access.redhat.com/security/cve/CVE-2026-17183"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39834",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39834"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42127",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42127"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73501",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73501"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76905",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76905"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77354",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77354"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77405",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77405"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77411",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77411"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-88031",
        "url": "https://access.redhat.com/security/cve/CVE-2026-88031"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-92542",
        "url": "https://access.redhat.com/security/cve/CVE-2026-92542"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-92543",
        "url": "https://access.redhat.com/security/cve/CVE-2026-92543"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95517.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.7.4 security update",
    "tracking": {
      "current_release_date": "2026-11-13T16:45:18+00:00",
      "generator": {
        "date": "2026-11-13T16:45:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.6"
        }
      },
      "id": "RHSA-2026:95517",
      "initial_release_date": "2026-11-05T11:40:25+00:00",
      "revision_history": [
        {
          "date": "2026-11-05T11:40:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-05T11:40:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-13T16:45:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.7.4",
                "product": {
                  "name": "Multicluster Global Hub 1.7.4",
                  "product_id": "Multicluster Global Hub 1.7.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1793002792"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Add4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1792971214"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1792971204"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Af0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1793081711"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1793057598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1793057536"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Af6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1793002792"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Afe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1792971214"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1792971204"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ad428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1793057598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1793057536"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1793002792"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ae2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1792971214"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1792971204"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Acac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1793057598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1793057536"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1793002792"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1792971214"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1792971204"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1793057598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1793057536"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64 as a component of Multicluster Global Hub 1.7.4",
          "product_id": "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-14199",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "discovery_date": "2026-08-20T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521850"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "On instances using Auth Proxy header authentication ([auth.proxy]) with identity caching enabled (sync_ttl \u003e 0), two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged user\u0027s cached session and act as that user for the duration of the cache TTL. Default configurations are not affected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Session takeover via Auth Proxy cache key collision",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important impact because successful exploitation allows an authenticated user to hijack sessions of administrative or privileged accounts, leading to complete compromise of the application. The flaw requires non-default settings where reverse proxy header-based authentication is enabled alongside active identity caching. In standard Red Hat product deployments, header-based proxy authentication is not enabled by default, which substantially limits the attack surface across standard installations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14199"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521850",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521850"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14199"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-14199/",
          "url": "https://grafana.com/security/security-advisories/cve-2026-14199/"
        }
      ],
      "release_date": "2026-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Set [auth.proxy] sync_ttl = 0 to disable the identity cache (identity is then synced on every request), or upgrade to a fixed version: 11.0.0+, 12.4.10+ (12.4.x), 13.0.8+ (13.0.x), 13.1.5+ (13.1.x), or 13.2.1+ (13.2.x and newer \u2014 13.2.0 itself is still vulnerable).",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana: Grafana: Session takeover via Auth Proxy cache key collision"
    },
    {
      "cve": "CVE-2026-15815",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory"
      },
      "discovery_date": "2026-09-02T04:36:25.029000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527474"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana. When extracting plugin archives, Grafana did not safely resolve symbolic links. A remote attacker could craft a malicious plugin archive with symbolic links to escape the plugin installation directory. This allows the attacker to write arbitrary files and execute malicious code with the privileges of the Grafana server process, leading to remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Grafana\u0027s plugin extraction process is vulnerable to symbolic link traversal, enabling an attacker to write arbitrary files and achieve remote code execution with the privileges of the Grafana server. This critical flaw allows malicious code execution even before plugin signature verification, posing a significant risk in Red Hat deployments where Grafana is used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15815"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527474",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527474"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15815"
        }
      ],
      "release_date": "2026-09-30T12:39:01.791415+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "While no configuration fully mitigates this issue, exposure can be reduced by limiting plugin installations to vetted and pinned sets of plugins from trusted sources. Additionally, disable the `plugin_admin_enabled` setting in the Grafana configuration if not required, to prevent non-administrator users from installing plugins. This can be done by setting `plugin_admin_enabled = false` in the `[plugins]` section of the `grafana.ini` configuration file. A restart of the Grafana service may be required for changes to take effect, which could temporarily impact service availability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION"
    },
    {
      "cve": "CVE-2026-17183",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-08-19T17:41:08.158265+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519801"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana\u0027s Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the `queryType` field, an attacker can execute queries against datasources they are not authorized to access, leading to the disclosure of sensitive data. This vulnerability arises from inconsistent query classification between authorization and execution paths.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Information disclosure vulnerability in Unified Alerting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An authorization bypass vulnerability was found in Grafana\u0027s Unified Alerting engine. An authenticated user with folder permissions to create or edit alert rules can manipulate the queryType parameter to __expr__ while supplying an arbitrary datasourceUid. Because the authorization layer misclassifies the query as a local expression and skips datasource permission checks while the evaluator executes it against the specified backend datasource, the attacker can execute unauthorized queries using Grafana\u0027s configured datasource credentials, leading to sensitive data disclosure and potential backend data tampering.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17183"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519801",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519801"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17183"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-17183",
          "url": "https://grafana.com/security/security-advisories/cve-2026-17183"
        }
      ],
      "release_date": "2026-08-19T17:30:06.798000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Restrict alert rule creation and editing permissions to trusted administrators using Grafana RBAC, or enforce strict read-only and least-privilege credential scopes directly on backend datasources.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana: Grafana: Information disclosure vulnerability in Unified Alerting"
    },
    {
      "cve": "CVE-2026-39834",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-22T04:01:15.681060+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480676"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having a Moderate impact because triggering the condition requires transmitting an unchunked payload exceeding 4GB in a single operation across an SSH channel, which represents an atypical pattern in standard deployments. In typical Red Hat environments and containerized applications consuming this Go package, network communications and data transfers are handled in significantly smaller buffers, substantially limiting realistic exposure. In the event of exploitation, the blast radius is restricted to process hang and denial of service via an infinite loop, without compromising system confidentiality or data integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480676",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39834",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781663",
          "url": "https://go.dev/cl/781663"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79567",
          "url": "https://go.dev/issue/79567"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5020",
          "url": "https://pkg.go.dev/vuln/GO-2026-5020"
        }
      ],
      "release_date": "2026-05-22T02:31:27.540000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
    },
    {
      "cve": "CVE-2026-42127",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-22T18:01:38.336979+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491449"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Grafana. An unauthenticated attacker can exploit the public dashboard query endpoint by sending arbitrarily large JSON payloads. This vulnerability, caused by a lack of request body size limits, triggers excessive memory allocation, leading to a denial of service through memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Grafana, affecting Red Hat products that include Grafana. Unauthenticated remote attackers can exploit the public dashboard query endpoint by sending large JSON payloads, leading to excessive memory allocation and potential service disruption. The absence of authentication requirements for exploitation increases the risk of widespread impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42127"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491449",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491449"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42127",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42127"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42127",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42127"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-42127",
          "url": "https://grafana.com/security/security-advisories/cve-2026-42127"
        }
      ],
      "release_date": "2026-06-22T16:31:28.096000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to the Grafana instance to only trusted clients and networks. This can be achieved by configuring firewall rules to limit inbound connections to the Grafana service port. If Grafana is exposed via a reverse proxy, ensure the proxy is configured to limit request body sizes to prevent large payloads from reaching Grafana. A service restart may be required for network configuration changes to take effect.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads"
    },
    {
      "cve": "CVE-2026-63209",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "discovery_date": "2026-09-29T15:12:15.658458+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543236"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543236",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
          "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
          "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
        }
      ],
      "release_date": "2026-09-29T14:58:53.366000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
    },
    {
      "cve": "CVE-2026-73501",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Functionality"
      },
      "discovery_date": "2026-08-12T21:41:02.246848+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized access to protected resources that should require proper authentication, compromising the application\u0027s security.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this as Important rather than Critical because exploitation requires the target application to explicitly instantiate and load the ValidationHandler middleware instead of ValidateRequest() or the Validator middleware.  \n\nRHOAI images ship kin-openapi 0.131\u20130.133 but do not invoke ValidationHandler as auth middleware in default roles (KServe, model-registry, mod-arch verified; BFF has no package). Hence, RHOAI is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73501",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73501",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73501"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da",
          "url": "https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw"
        }
      ],
      "release_date": "2026-08-12T21:23:40.623000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default"
    },
    {
      "cve": "CVE-2026-73502",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-18T18:02:00.185346+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2518119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the `openapi3filter.ValidateRequest` function. This occurs when validating a request against a `content` parameter whose `application/json` media type has no schema. Successful exploitation leads to a denial of service, causing request validation to panic and potentially resulting in an aborted request or a full process crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate severity because in Go services built on the standard net/http server \u2014 which includes all affected Red Hat products \u2014 panics inside HTTP handlers are recovered automatically per-goroutine. Only the individual request fails; the service continues to serve subsequent requests without data loss or state corruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2518119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73502"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64",
          "url": "https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq"
        }
      ],
      "release_date": "2026-08-18T17:58:21.320000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "As a partial workaround, administrators can audit their OpenAPI specification files and ensure every content parameter declares an explicit schema for each media type, which prevents the nil-dereference code path from being reached.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference"
    },
    {
      "cve": "CVE-2026-76905",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-21T21:01:10.263717+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521202"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific error-rendering helpers to panic, leading to a Denial of Service (DoS). JSON request bodies and applications that do not use these error-rendering helpers are not affected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat scores A:L because the panic occurs inside an HTTP handler goroutine where Go\u0027s net/http automatically recovers it. Only the individual request fails; the server continues serving. The CNA scores A:H based on the theoretical case of no recovery boundary.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521202",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521202"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76905",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76905",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76905"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c",
          "url": "https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.141.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.141.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w"
        }
      ],
      "release_date": "2026-08-21T20:43:07.066000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body"
    },
    {
      "cve": "CVE-2026-77354",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-08-21T21:01:36.238326+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a specially crafted query with a large index in a deepObject query parameter. This forces the application to allocate multi-gigabyte memory, leading to an Out-of-Memory (OOM) error or a restart loop, effectively causing a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Important because a small request can exhaust memory and terminate an exposed service. Exploitation requires an application to decode attacker-controlled query parameters using kin-openapi\u2019s deepObject handling with an array-containing schema. Schema limits such as maxItems do not prevent the allocation, and HTTP handler panic recovery does not protect against process termination from memory exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77354",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77354",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77354"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/commit/1223a0f215d2cf9beb2d9eb9ea2649d001c21388",
          "url": "https://github.com/getkin/kin-openapi/commit/1223a0f215d2cf9beb2d9eb9ea2649d001c21388"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/pull/923",
          "url": "https://github.com/getkin/kin-openapi/pull/923"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.142.0",
          "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.142.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-xhj3-7xw9-vr34",
          "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-xhj3-7xw9-vr34"
        }
      ],
      "release_date": "2026-08-21T20:44:47.792000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding"
    },
    {
      "cve": "CVE-2026-77405",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "discovery_date": "2026-09-16T14:54:28.456368+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535502"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RabbitMQ amqp091-go. The tlsConfigFromURI helper creates tls.Config values for amqps:// URIs without setting MinVersion. When the client is built with a Go toolchain whose default still permits TLS 1.0 or TLS 1.1, a network attacker who can influence TLS negotiation may force an obsolete protocol version and weaken protection of AMQP messages and credentials. The issue is fixed in amqp091-go 1.13.0 by requiring TLS 1.2 as the minimum.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has an Important impact. Red Hat product streams that ship amqp091-go before 1.13.0 are Affected because tlsConfigFromURI does not set an explicit TLS MinVersion when parsing AMQPS URIs. Exploitation requires a man-in-the-middle position on the path to the AMQP broker; Go 1.18 or later client defaults further raise complexity by preferring TLS 1.2 when MinVersion is unset. Streams that already ship amqp091-go 1.13.0 or later contain the explicit fix and are Not affected. The issue is not Critical because it is not remotely exploitable without those high-complexity prerequisites, and it does not provide unauthenticated remote code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77405"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535502",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535502"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77405",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77405"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77405",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77405"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/c9fd433ecac2e557919e51acc9d809390c402c6e",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/c9fd433ecac2e557919e51acc9d809390c402c6e"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/355",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/355"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-33mj-cw25-m34h",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-33mj-cw25-m34h"
        }
      ],
      "release_date": "2026-09-16T14:42:08.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Ensure clients are built with Go 1.18 or later so the TLS client default is at least TLS 1.2. Restrict AMQP clients to trusted brokers and limit broker network exposure. If using DialTLS with a custom tls.Config, set MinVersion to tls.VersionTLS12 or higher explicitly.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser"
    },
    {
      "cve": "CVE-2026-77411",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-09-16T14:53:00.059522+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535495"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "RabbitMQ amqp091-go versions before 1.13.0 mishandle an oversized AMQP longstr field. A malicious or compromised broker can desynchronize message parsing, causing subsequent bytes to be interpreted as AMQP data and disrupting connection integrity or availability. Fixed in version 1.13.0.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects Red Hat products using the vulnerable RabbitMQ amqp091-go client. Exploitation requires a malicious or compromised AMQP broker and may disrupt client connections or cause unintended protocol processing. Red Hat rates this issue Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77411"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535495",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535495"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77411",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77411"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77411",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77411"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/commit/143c1ace5fa7344cee135e5c7d22970f0de68282",
          "url": "https://github.com/rabbitmq/amqp091-go/commit/143c1ace5fa7344cee135e5c7d22970f0de68282"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/pull/347",
          "url": "https://github.com/rabbitmq/amqp091-go/pull/347"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0",
          "url": "https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-c5pq-fr2g-9jpf",
          "url": "https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-c5pq-fr2g-9jpf"
        }
      ],
      "release_date": "2026-09-16T14:45:48.976000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "Connect applications only to trusted AMQP brokers, restrict network access to approved broker endpoints, use transport security and protected credentials, and update to a Red Hat product version containing the fix for amqp091-go 1.13.0 or later.",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-88031",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-09-10T18:11:27.321656+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2531587"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go.mongodb.org/mongo-driver for version \u003c 1.17.10 and \u003c 2.9.1. \nImproper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the MongoDB Go Driver. The GridFS component does not properly sanitize caller-supplied file identifiers before using them in database queries. A structured document passed as a file ID (for example, a BSON document containing query operators) is interpreted as a query condition rather than a literal match value. An authenticated attacker who can influence the file identifier passed to GridFS operations such as Delete, DownloadToStream, or OpenDownloadStream in an affected application can exploit this to delete all chunks in a GridFS bucket, resulting in permanent data loss and denial of service.\nThe practical impact depends on whether the product\u0027s code passes externally-controlled values as GridFS file identifiers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2531587",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531587"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-88031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88031"
        },
        {
          "category": "external",
          "summary": "https://jira.mongodb.org/browse/GODRIVER-4081",
          "url": "https://jira.mongodb.org/browse/GODRIVER-4081"
        },
        {
          "category": "external",
          "summary": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342",
          "url": "https://www.mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342"
        }
      ],
      "release_date": "2026-09-10T17:59:35.845000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        },
        {
          "category": "workaround",
          "details": "If upgrading go.mongodb.org/mongo-driver to version 1.17.10 (v1) or 2.9.1 (v2) is not immediately possible, the following steps can reduce exposure:\n- Validate file identifiers before passing them to GridFS operations. Ensure that file IDs supplied by users or external systems are scalar values (e.g., primitive.ObjectID or string) and reject any structured BSON documents or maps. This prevents query operator injection.\n- Restrict who can supply GridFS file identifiers. Do not allow unauthenticated or low-privilege users to directly control the file ID parameter in GridFS API calls (Delete, OpenDownloadStream, DownloadToStream, etc.).",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs"
    },
    {
      "cve": "CVE-2026-92542",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-10-07T16:51:21.106212+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Moby. Firewall rules for encrypted Swarm overlay networks fail to distinguish between authentic kernel traffic and packets crafted by user processes. A local attacker can exploit this flaw by sending forged Virtual Extensible LAN (VXLAN) datagrams matching the overlay network configuration, causing the host to encrypt and route the traffic. This issue allows an attacker to inject unauthorized traffic into secure container networks, leading to network data tampering and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/moby: Moby: Unauthorized traffic injection via forged VXLAN datagrams",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has evaluated this vulnerability as having an Important severity rather than Moderate because an authenticated local user can craft datagrams to bypass network boundaries and compromise integrity or availability across encrypted container segments without requiring administrative privileges. However, Red Hat container ecosystems such as OpenShift and standard enterprise host configurations deploy Podman and Kubernetes runtimes rather than Docker Swarm. Because Swarm mode and its encrypted overlay network drivers are not used or enabled by default in supported Red Hat platforms, standard deployments are not exposed to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-92542"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-92542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-92542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92542"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-6m9p-4h64-m6vh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-6m9p-4h64-m6vh"
        }
      ],
      "release_date": "2026-10-07T16:42:20.998000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/moby/moby: Moby: Unauthorized traffic injection via forged VXLAN datagrams"
    },
    {
      "cve": "CVE-2026-92543",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-07T17:11:12.495625+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Docker Engine. This vulnerability can lead to information disclosure or container image tampering by allowing an attacker to intercept unencrypted registry traffic. The flaw exists because the engine disables Transport Layer Security (TLS) certificate verification if any resolved address of a registry hostname matches a trusted local loopback network. A remote attacker capable of manipulating Domain Name System (DNS) responses can inject a loopback address alongside an external server address, tricking the client into connecting to an attacker-controlled registry over insecure HTTP.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because successful exploitation allows an attacker to intercept registry communications and inject untrusted container images or capture sensitive credentials. Exploitation requires high attack complexity, as the adversary must actively manipulate DNS responses to return a loopback IP alongside a target remote IP. While Red Hat core container runtimes primarily rely on Podman and CRI-O rather than the Docker Engine daemon, certain platform utilities and embedded management tools that integrate Moby container client logic remain exposed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
          "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-92543"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-92543",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-92543"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92543",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92543"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73"
        }
      ],
      "release_date": "2026-10-07T16:44:21.237000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-05T11:40:25+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:95517"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d9fe00b9c80796cc710c0b49e06795ecf55c6197816e228ef4e446a21379099_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dd4c512a9c5380427626a0551acc640ff9f96ab07425fb651596a46170b327cb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e2afb30aa162a59f0e4103028bf05569997975f87145f5bbb8d006e1ac35c8b5_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:fe98904a78d0381f3c2ef32c753ae162877407e6009ca17809fb3277f7abc7ef_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:2985d0c15c423aa3f9f5df66c20b5ece4bd37f2e3eb952aaf1d9745bb456b527_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:43f52c460629cca07989cc716cfa465eb858ef3705701da139a55ac5017eabab_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7415295d72e74543d00c2023f1c5624d5f15b0ffa2bd42c017badf02d78c47f8_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f6a443ce52764b13427f63ffa4f25e051000602945d3af47c75639c9b4bf0656_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b97cbea44da8cad3199d15f0c96f2f3440163bd0d5086fa00db86ea258e911d_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:42a831b19cb8c62e92a02d0824d7c70962c1a1051e5a9028632c7454ec42c1fe_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:4e13279115416885d5d42088caccd1601915f65f214c2c5f4c811e9682c231ae_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5fd8b7c211113e96d99371c527110103bf388bac27b0c864ee9d8bfd2d8d1cd9_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f0b3920c39b77eee70260673aeb0df7c86ef1f5ef1bd8f0746998574ef5260e6_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3a861e08ae9444fe8bdf68a9be271f6b0bac4d335634f12e9b7f14a96ac0d4e8_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:418a309a403ff81d1f060365162dcbd1b570fdfa4154b3202332a1235e2196b3_arm64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:54c611edba4887450fc738ac7aba75662388be94714b3465bd6090ae11b241bb_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7d725d3b1e221831ace1de469533d1bedee8734794faa93fc5897c65bc3dfd64_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3175d4a76291ffc120e2104b334d1c317acc6b457b95b91927fd421d305f7e99_amd64",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3315f7920e9dee76f5793574838bd41f05a84ce4df6e835f738633581bd004d6_s390x",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cac2709900dbce683afd61b64780fa49451efc15a3ed56dfafba4062f07c9174_ppc64le",
            "Multicluster Global Hub 1.7.4:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d428512a746ffc8ab230d06368396dc1bbd95dd440104001cad31890a1106111_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.