Vulnerability-Lookup

RHSA-2026:99635

Vulnerability from csaf_redhat - Published: 2026-11-12 12:52 - Updated: 2026-11-13 15:00

Summary

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.14

Severity

Important

Notes

Topic: Logging for Red Hat OpenShift - 6.2.14

Details: Red Hat OpenShift Logging 6.2.14 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x	—	Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-32285

A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-42151

A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-256 - Plaintext Storage of a Password

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-42154

A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1046 - Creation of Immutable Text Using String Concatenation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x	—	Workaround

Threats

Impact Important

CVE-2026-42502

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Moderate

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Fixed 4 products, the same list as for CVE-2026-25681

Known not affected 30 products, the same list as for CVE-2026-25681

Threats

Impact Important

CVE-2026-77619

A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x	—	Vendor Fix fix

Known not affected 30 products

Product	Identifier	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le		—

Threats

Impact Important

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64	—	Vendor Fix fix
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64	—	Vendor Fix fix

Known not affected 22 products

Product	Identifier	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64		—
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x		—

Threats

Impact Important

CVE-2026-116591

A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard (zstd) compressed stream to an application using the library, resulting in a Denial of Service (DoS). Due to an integer handling error in the decompression logic, the decoder retains stale internal state and performs an out-of-bounds read, triggering an unhandled panic that crashes the application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64	—	Workaround
Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x	—	Workaround

Threats

Impact Important

References

116 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:99635	self
https://access.redhat.com/security/cve/CVE-2026-116591	external
https://access.redhat.com/security/cve/CVE-2026-25681	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-32285	external
https://access.redhat.com/security/cve/CVE-2026-33186	external
https://access.redhat.com/security/cve/CVE-2026-41178	external
https://access.redhat.com/security/cve/CVE-2026-42151	external
https://access.redhat.com/security/cve/CVE-2026-42154	external
https://access.redhat.com/security/cve/CVE-2026-42499	external
https://access.redhat.com/security/cve/CVE-2026-42502	external
https://access.redhat.com/security/cve/CVE-2026-63209	external
https://access.redhat.com/security/cve/CVE-2026-77619	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-25681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761	external
https://www.cve.org/CVERecord?id=CVE-2026-25681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681	external
https://go.dev/cl/781703	external
https://go.dev/issue/79574	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5029	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-32285	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451846	external
https://www.cve.org/CVERecord?id=CVE-2026-32285	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32285	external
https://github.com/buger/jsonparser/issues/275	external
https://github.com/golang/vulndb/issues/4514	external
https://pkg.go.dev/vuln/GO-2026-4514	external
https://access.redhat.com/security/cve/CVE-2026-33186	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833	external
https://www.cve.org/CVERecord?id=CVE-2026-33186	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-41178	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830	external
https://www.cve.org/CVERecord?id=CVE-2026-41178	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://access.redhat.com/security/cve/CVE-2026-42151	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466507	external
https://www.cve.org/CVERecord?id=CVE-2026-42151	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42151	external
https://github.com/prometheus/prometheus/pull/18587	external
https://github.com/prometheus/prometheus/pull/18590	external
https://github.com/prometheus/prometheus/releases…	external
https://github.com/prometheus/prometheus/releases…	external
https://github.com/prometheus/prometheus/security…	external
https://access.redhat.com/security/cve/CVE-2026-42154	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466505	external
https://www.cve.org/CVERecord?id=CVE-2026-42154	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42154	external
https://github.com/prometheus/prometheus/pull/18584	external
https://github.com/prometheus/prometheus/pull/18585	external
https://github.com/prometheus/prometheus/security…	external
https://access.redhat.com/security/cve/CVE-2026-42499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809	external
https://www.cve.org/CVERecord?id=CVE-2026-42499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499	external
https://go.dev/cl/771520	external
https://go.dev/issue/78987	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4977	external
https://access.redhat.com/security/cve/CVE-2026-42502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480762	external
https://www.cve.org/CVERecord?id=CVE-2026-42502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42502	external
https://go.dev/cl/781701	external
https://go.dev/issue/79572	external
https://pkg.go.dev/vuln/GO-2026-5027	external
https://access.redhat.com/security/cve/CVE-2026-63209	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543236	external
https://www.cve.org/CVERecord?id=CVE-2026-63209	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63209	external
https://github.com/klauspost/compress/commit/5392…	external
https://github.com/klauspost/compress/releases/ta…	external
https://github.com/klauspost/compress/security/ad…	external
https://access.redhat.com/security/cve/CVE-2026-77619	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538945	external
https://www.cve.org/CVERecord?id=CVE-2026-77619	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77619	external
https://github.com/vectordotdev/vector/commit/316…	external
https://github.com/vectordotdev/vector/pull/25819	external
https://github.com/vectordotdev/vector/releases/t…	external
https://github.com/vectordotdev/vector/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-116591	self
https://bugzilla.redhat.com/show_bug.cgi?id=2561461	external
https://www.cve.org/CVERecord?id=CVE-2026-116591	external
https://nvd.nist.gov/vuln/detail/CVE-2026-116591	external
https://github.com/klauspost/compress/commit/7f5d…	external
https://github.com/klauspost/compress/releases/ta…	external
https://github.com/klauspost/compress/security/ad…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Logging for Red Hat OpenShift - 6.2.14",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Logging 6.2.14 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:99635",
        "url": "https://access.redhat.com/errata/RHSA-2026:99635"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-116591",
        "url": "https://access.redhat.com/security/cve/CVE-2026-116591"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-77619",
        "url": "https://access.redhat.com/security/cve/CVE-2026-77619"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99635.json"
      }
    ],
    "title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.14",
    "tracking": {
      "current_release_date": "2026-11-13T15:00:13+00:00",
      "generator": {
        "date": "2026-11-13T15:00:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.6"
        }
      },
      "id": "RHSA-2026:99635",
      "initial_release_date": "2026-11-12T12:52:02+00:00",
      "revision_history": [
        {
          "date": "2026-11-12T12:52:02+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-12T12:52:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-13T15:00:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Logging Subsystem for Red Hat OpenShift 6.2",
                "product": {
                  "name": "Logging Subsystem for Red Hat OpenShift 6.2",
                  "product_id": "Logging Subsystem for Red Hat OpenShift 6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:6.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Logging Subsystem for Red Hat OpenShift"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794270701"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Aaeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1794271341"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1793867158"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794270738"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793818313"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793857392"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-operator-bundle@sha256%3Ae44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1793858116"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1793857399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793844811"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794200108"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794270701"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1793867158"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794270738"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793818313"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Ad50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793857392"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1793857399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793844811"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794200108"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Adfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794270701"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1793867158"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ab1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794270738"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793818313"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793857392"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1793857399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793844811"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794200108"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794270701"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3Aa09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1793867158"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794270738"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Ac44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793818313"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793857392"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1793857399"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793844811"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3Ad51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794200108"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-32285",
      "cwe": {
        "id": "CWE-1285",
        "name": "Improper Validation of Specified Index, Position, or Offset in Input"
      },
      "discovery_date": "2026-03-26T20:01:54.925687+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
        },
        {
          "category": "external",
          "summary": "https://github.com/buger/jsonparser/issues/275",
          "url": "https://github.com/buger/jsonparser/issues/275"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/vulndb/issues/4514",
          "url": "https://github.com/golang/vulndb/issues/4514"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4514",
          "url": "https://pkg.go.dev/vuln/GO-2026-4514"
        }
      ],
      "release_date": "2026-03-26T19:40:51.837000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity impact for Red Hat because remote unauthenticated attackers could bypass access restrictions, potentially compromising service integrity and exposing sensitive internal data across affected endpoints. To successfully exploit this issue, services must implement path-based authorization interceptors that enforce specific deny rules while permitting other requests through a fallback allow configuration. Typical Red Hat product deployments configure components with strict default-deny policies or transport-level mutual TLS, restricting the practical attack surface to non-standard environments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42151",
      "cwe": {
        "id": "CWE-256",
        "name": "Plaintext Storage of a Password"
      },
      "discovery_date": "2026-05-04T19:02:26.983660+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466507"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466507",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18587",
          "url": "https://github.com/prometheus/prometheus/pull/18587"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18590",
          "url": "https://github.com/prometheus/prometheus/pull/18590"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
        }
      ],
      "release_date": "2026-05-04T18:12:16.917000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
    },
    {
      "cve": "CVE-2026-42154",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-04T19:02:19.626646+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18584",
          "url": "https://github.com/prometheus/prometheus/pull/18584"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18585",
          "url": "https://github.com/prometheus/prometheus/pull/18585"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
        }
      ],
      "release_date": "2026-05-04T18:13:12.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42502",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation"
      },
      "discovery_date": "2026-05-22T16:01:11.151484+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781701",
          "url": "https://go.dev/cl/781701"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79572",
          "url": "https://go.dev/issue/79572"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5027",
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "release_date": "2026-05-22T15:01:21.649000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
    },
    {
      "cve": "CVE-2026-63209",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "discovery_date": "2026-09-29T15:12:15.658458+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543236"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543236",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
          "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
          "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
        }
      ],
      "release_date": "2026-09-29T14:58:53.366000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
    },
    {
      "cve": "CVE-2026-77619",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-09-22T21:45:39.938827+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2538945"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an unauthenticated remote attacker can crash the Vector collector process with minimal effort, disrupting log aggregation across multi-tenant environments. Exploitation requires that Vector is configured with the Logstash source enabled and accessible over the network. In OpenShift Logging deployments, Vector instances commonly collect and route cluster logs, meaning that an interruption of this pipeline halts log ingestion and visibility without requiring elevated privileges.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-77619"
        },
        {
          "category": "external",
          "summary": "RHBZ#2538945",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538945"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-77619",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-77619"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619"
        },
        {
          "category": "external",
          "summary": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37",
          "url": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37"
        },
        {
          "category": "external",
          "summary": "https://github.com/vectordotdev/vector/pull/25819",
          "url": "https://github.com/vectordotdev/vector/pull/25819"
        },
        {
          "category": "external",
          "summary": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0",
          "url": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6",
          "url": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6"
        }
      ],
      "release_date": "2026-09-22T15:15:45.066000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    },
    {
      "cve": "CVE-2026-116591",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-10-26T22:34:28.681138+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2561461"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard (zstd) compressed stream to an application using the library, resulting in a Denial of Service (DoS). Due to an integer handling error in the decompression logic, the decoder retains stale internal state and performs an out-of-bounds read, triggering an unhandled panic that crashes the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the klauspost compress library\u0027s Zstandard (zstd) decompression implementation. An integer handling flaw in the FSE normalized count parsing logic allows a remote attacker to supply a specially crafted two-block compressed stream. When processed by vulnerable decode routines, the parser retains stale decode-table state and executes an out-of-bounds read, triggering an unhandled runtime panic. Applications decompressing untrusted inputs will terminate abruptly, causing a denial of service, while container boundaries and non-root execution isolate the impact from the underlying host.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-116591"
        },
        {
          "category": "external",
          "summary": "RHBZ#2561461",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561461"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-116591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-116591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116591"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d",
          "url": "https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/releases/tag/v1.20.2",
          "url": "https://github.com/klauspost/compress/releases/tag/v1.20.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8",
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8"
        }
      ],
      "release_date": "2026-10-26T21:54:33.109000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T12:52:02+00:00",
          "details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99635"
        },
        {
          "category": "workaround",
          "details": "Reject or filter untrusted Zstandard-compressed payloads at ingress proxies, or restrict decompression endpoints to authenticated, trusted clients. No direct configuration-level workaround exists within the library itself.\n\n--- CME Mitigation Guidance (2026-11-03) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce bounds on parsed count values and decode-table indices in klauspost/compress zstd decompression routines to prevent integer wraparound and out-of-bounds indexing: upgrade to klauspost/compress 1.20.2+ (or the corresponding fixed Red Hat builds), which reject counts exceeding math.MaxInt16 in readNCount, restrict Huffman-weight FSE tableLog values to 6 in huff0.ReadTable, and adjust count validation in validateNorm, closing crafted two-block zstd compressed stream. Until patched, this is a concern on applications decompressing untrusted Zstandard (zstd) input using klauspost/compress DecodeAll or streaming decoder, so reject or filter untrusted Zstandard-compressed payloads at ingress proxies, or restrict decompression endpoints to authenticated, trusted clients. These controls limit blast radius and contain exploitation, but they do not fix the underlying integer wraparound defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1311 Input Size and Quantity Bounds Enforcement (high)",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:aeb073cb93b0d077d612e704e653f87339e30ce064d36bb6f36dfe8d653b71c1_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:096cc0807f174a7a7bff3e4ea940e877ec8bd9fe109b585ca49ed0cd38c1937e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:59f6f195f76ad635d1c1d0ca75d386f6ddbc0fdf88ec9e0d7eea21e1835abc7a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:638a2476ad685f7a26ed8713c2fe2fc2299f72cdf54c5f6f5e8a2e2eaec39c8f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:dfcc7a9cd8f2df7e6f27ed98ce23e0d56ac3369b94cbd77e954983d30ee7f7b3_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2298fd0f0e78b89f67957a44f4eacbe235ad5a24618012364037e17b7766b3c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3aaf0416523f98ad51d0967d8e40a55ece9ee01db6fcef16973c539386f187e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6d3bf01f563ffd72aef36d84bc06aaa2c1d88afe5f99388f607fecc39a755d83_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a09742cf2f0a30541d94ec0de8fedf6e57b6535a27c4832b497d4d4b71c00e3f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3d888aac0c109208b112f03bf2e1118445e6af34be1d1912180b75c50b5575ec_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:687d8698148db3eaf06884c7917a2fa28edcb8f377f08888a28a29e6e0ee36f3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9b058139f189ebe678440f974cd8b519f27929eaaa880975636d7851cca243ef_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b1f3a3d41ba42ad8517fdabe0a36c91c53cabb435e2de38e575982ab650d3928_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:14de1532d1ddada3de43e71b07da14ca8abb570e5c05111ca21a0d5993502e00_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d7f0db9121887a45f10b3e9f9b7b3d2277619a8408f113fbbf88e0f81af7456_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5b44f0bdd3e92660adabdbe19620b22a06ffb6f5471c1f2b39dbb08dc832000d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c44618fc729bca7c34db11610ef93db045b0356cb0cf4425fa802a1e99e4f876_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:e44a0fc15ee61536ed57da87f6a0b1947571059294b2def46b07e1182508fb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:28f567ec0d79b71f6f47deccf840585f79aae1534a65ea94946ba90ed01af3c2_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4d45b8023601a95c99859320a679901033d95bb8c31d2f94745cb75333038642_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:76df04d9188e61959bcf91f8c81a60690bd859ed1caa9a627d80f0eb850db417_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d50de8184dda6414e3e1d3ce980c0411ab40e0ec03870ec4a7d4f99e0a407596_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1cff26c27c8948f48697c366db797b3b23833bac60419edaf3b16a46f95d2cf0_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:419c7e0e4a16d634a28d022edf3ceb509d855fdf4b353b42e58eaf6a3d926c6f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5f05b087ebd55be3a36f9e5d6247a21a5b82d2dc10b31201fa48d33f15ec2113_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7ec8cc0023d1122c8f91ec1a22a67d5f0ff82ea2c7343cc9a71e88fdd4ebac5c_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:3efa8d3555083d8d5485f350941bcd66ce44a36170025596213a2e33855e2c4e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6f8087d61fe8b7efcba633835bfa9dd32997f1c4c98fe14ae54b294afa6a9e4a_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7877df43066f5b10d4c11f31a7b7f8818fd03c601c02856af7cc74cd5bf499d4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a365ffbf084ae5aaebd0abb89e31096500763ec1e96549be9019c927dd690743_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0d3cf3c83d4111e1b759dd3dcfac814ae35fc964f56f0e8b847ea9113ea70330_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:40bc0f88fb9625119f6ef670c70fc1436a91d6ac92afece5b954cd3633f869d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:9095e77beace214ee64aa38fe4f1cba425865d724911b67997e7a990cc23151d_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d51d58ccedd0b2504859c805660cb5fe1dc8ec2d67a1828d419c26d4a509bddf_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input"
    }
  ]
}

CVE-2026-63209 (GCVE-0-2026-63209)

Vulnerability from cvelistv5 – Published: 2026-09-29 14:58 – Updated: 2026-09-29 16:32

Title

Integer Overflow or Wraparound and Out-of-bounds Write in compress

Summary

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 16:31 UTC

CWE

CWE-190 - Integer Overflow or Wraparound
CWE-787 - Out-of-bounds Write

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/klauspost/compress/security/ad…	x_refsource_CONFIRM
https://github.com/klauspost/compress/commit/5392…	x_refsource_MISC
https://github.com/klauspost/compress/releases/ta…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
klauspost	compress	Affected: < 1.18.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T16:31:39.668233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T16:32:32.677Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "compress",
          "vendor": "klauspost",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.18.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-29T14:58:53.366Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
        },
        {
          "name": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
        },
        {
          "name": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
        }
      ],
      "source": {
        "advisory": "GHSA-259r-337f-4rfw",
        "discovery": "UNKNOWN"
      },
      "title": "Integer Overflow or Wraparound and Out-of-bounds Write in compress"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63209",
    "datePublished": "2026-09-29T14:58:53.366Z",
    "dateReserved": "2026-07-15T22:19:06.906Z",
    "dateUpdated": "2026-09-29T16:32:32.677Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77619 (GCVE-0-2026-77619)

Vulnerability from cvelistv5 – Published: 2026-09-22 15:15 – Updated: 2026-09-22 16:06

Title

Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Summary

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send a minimal frame declaring a multi-gigabyte payload, causing an excessive allocation that can abort Vector or invoke the host OOM killer. Because the allocation follows the declared length rather than bytes transmitted, the attacker has low resource cost, and process termination can halt log ingestion for every tenant on a shared pipeline. This issue is fixed in version 0.57.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-22 16:06 UTC

CWE

CWE-130 - Improper Handling of Length Parameter Inconsistency
CWE-789 - Memory Allocation with Excessive Size Value

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/vectordotdev/vector/security/a…	x_refsource_CONFIRM
https://github.com/vectordotdev/vector/pull/25819	x_refsource_MISC
https://github.com/vectordotdev/vector/commit/316…	x_refsource_MISC
https://github.com/vectordotdev/vector/releases/t…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
vectordotdev	vector	Affected: >= 0.15.0, < 0.57.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77619",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-22T16:06:34.991536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-22T16:06:54.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vector",
          "vendor": "vectordotdev",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.15.0, \u003c 0.57.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send a minimal frame declaring a multi-gigabyte payload, causing an excessive allocation that can abort Vector or invoke the host OOM killer. Because the allocation follows the declared length rather than bytes transmitted, the attacker has low resource cost, and process termination can halt log ingestion for every tenant on a shared pipeline. This issue is fixed in version 0.57.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-130",
              "description": "CWE-130: Improper Handling of Length Parameter Inconsistency",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "CWE-789: Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-22T15:15:45.066Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6"
        },
        {
          "name": "https://github.com/vectordotdev/vector/pull/25819",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vectordotdev/vector/pull/25819"
        },
        {
          "name": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37"
        },
        {
          "name": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0"
        }
      ],
      "source": {
        "advisory": "GHSA-rrfg-9487-mhp6",
        "discovery": "UNKNOWN"
      },
      "title": "Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-77619",
    "datePublished": "2026-09-22T15:15:45.066Z",
    "dateReserved": "2026-08-20T20:52:01.926Z",
    "dateUpdated": "2026-09-22T16:06:54.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84445 (GCVE-0-2026-84445)

Vulnerability from cvelistv5 – Published: 2026-09-14 16:11 – Updated: 2026-09-14 16:36

Title

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

Summary

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-14 16:36 UTC

CWE

CWE-129 - Improper Validation of Array Index
CWE-248 - Uncaught Exception

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

10 references

URL	Tags
https://github.com/grpc/grpc-go/security/advisori…	x_refsource_CONFIRM
https://github.com/grpc/grpc-go/issues/9354	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9365	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9366	x_refsource_MISC
https://github.com/grpc/grpc-go/pull/9367	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/3822494d8e…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/8668b69c16…	x_refsource_MISC
https://github.com/grpc/grpc-go/commit/93e31b4854…	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	x_refsource_MISC
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
grpc	grpc-go	Affected: < 1.82.2 Affected: >= 1.83.0, < 1.83.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84445",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T16:36:00.554548Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T16:36:14.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "grpc-go",
          "vendor": "grpc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.82.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.83.0, \u003c 1.83.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129: Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T16:11:41.401Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        },
        {
          "name": "https://github.com/grpc/grpc-go/issues/9354",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9365",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9366",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "name": "https://github.com/grpc/grpc-go/pull/9367",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "name": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "name": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        }
      ],
      "source": {
        "advisory": "GHSA-2v4p-qf9q-27wj",
        "discovery": "UNKNOWN"
      },
      "title": "gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84445",
    "datePublished": "2026-09-14T16:11:41.401Z",
    "dateReserved": "2026-09-01T20:05:09.422Z",
    "dateUpdated": "2026-09-14T16:36:14.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:99635

CVE-2026-63209 (GCVE-0-2026-63209)

CVE-2026-77619 (GCVE-0-2026-77619)

CVE-2026-84445 (GCVE-0-2026-84445)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour