RHSA-2025:0664

Vulnerability from csaf_redhat - Published: 2025-01-23 13:02 - Updated: 2026-04-11 19:44
Summary
Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements
Severity
Moderate
Notes
Topic: Release of OpenShift Serverless Logic 1.35.0 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release includes security, bug fixes, and enhancements. Security Fix(es): * com.graphql-java/graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094) * openshift-serverless-1-logic-rhel8-operator-container: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) * path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296) For more details about the security issues, including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE pages listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2024-24786

A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2025:0664
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVE-2024-40094

A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2025:0664
CVE-2024-45296

A flaw was found in path-to-regexp package, where it turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single-threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a denial of service (DoS).

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-1333 - Inefficient Regular Expression Complexity
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2025:0664
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References
https://access.redhat.com/errata/RHSA-2025:0664 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2268046 external
https://bugzilla.redhat.com/show_bug.cgi?id=2301456 external
https://bugzilla.redhat.com/show_bug.cgi?id=2310908 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2024-24786 self
https://bugzilla.redhat.com/show_bug.cgi?id=2268046 external
https://www.cve.org/CVERecord?id=CVE-2024-24786 external
https://nvd.nist.gov/vuln/detail/CVE-2024-24786 external
https://go.dev/cl/569356 external
https://groups.google.com/g/golang-announce/c/ArQ… external
https://pkg.go.dev/vuln/GO-2024-2611 external
https://access.redhat.com/security/cve/CVE-2024-40094 self
https://bugzilla.redhat.com/show_bug.cgi?id=2301456 external
https://www.cve.org/CVERecord?id=CVE-2024-40094 external
https://nvd.nist.gov/vuln/detail/CVE-2024-40094 external
https://github.com/graphql-java/graphql-java/comm… external
https://github.com/graphql-java/graphql-java/disc… external
https://github.com/graphql-java/graphql-java/pull/3539 external
https://github.com/graphql-java/graphql-java/rele… external
https://github.com/graphql-java/graphql-java/rele… external
https://github.com/graphql-java/graphql-java/rele… external
https://access.redhat.com/security/cve/CVE-2024-45296 self
https://bugzilla.redhat.com/show_bug.cgi?id=2310908 external
https://www.cve.org/CVERecord?id=CVE-2024-45296 external
https://nvd.nist.gov/vuln/detail/CVE-2024-45296 external
https://github.com/pillarjs/path-to-regexp/commit… external
https://github.com/pillarjs/path-to-regexp/commit… external
https://github.com/pillarjs/path-to-regexp/securi… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Release of OpenShift Serverless Logic 1.35.0\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release includes security, bug fixes, and enhancements.\n\nSecurity Fix(es):\n\n* com.graphql-java/graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)\n\n* openshift-serverless-1-logic-rhel8-operator-container: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)\n\n* path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296)\n\nFor more details about the security issues, including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE pages listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:0664",
        "url": "https://access.redhat.com/errata/RHSA-2025:0664"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2268046",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
      },
      {
        "category": "external",
        "summary": "2301456",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301456"
      },
      {
        "category": "external",
        "summary": "2310908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310908"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0664.json"
      }
    ],
    "title": "Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update \u0026 enhancements",
    "tracking": {
      "current_release_date": "2026-04-11T19:44:37+00:00",
      "generator": {
        "date": "2026-04-11T19:44:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2025:0664",
      "initial_release_date": "2025-01-23T13:02:37+00:00",
      "revision_history": [
        {
          "date": "2025-01-23T13:02:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-01-23T13:02:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-11T19:44:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "8Base-Openshift-Serverless-1.35",
                "product": {
                  "name": "8Base-Openshift-Serverless-1.35",
                  "product_id": "8Base-RHOSS-1.35",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_serverless:1.35::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Serverless"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
                  "product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
                  "product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
                  "product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
                  "product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
                  "product_id": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
                  "product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
                  "product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
                  "product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
                  "product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
                  "product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
                  "product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
                  "product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
                  "product_id": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\u0026tag=1.35.0-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
                  "product_id": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-management-console-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
                  "product_id": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
                  "product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
                  "product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
                  "product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
                  "product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
                  "product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
                  "product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
                  "product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
                  "product_id": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\u0026tag=1.35.0-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
                  "product_id": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
                  "product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
                  "product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
                "product": {
                  "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
                  "product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64"
        },
        "product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64 as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64"
        },
        "product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
          "product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
        },
        "product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
        "relates_to_product_reference": "8Base-RHOSS-1.35"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-24786",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-03-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2268046"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Golang\u0027s protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2268046",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/569356",
          "url": "https://go.dev/cl/569356"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/",
          "url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-2611",
          "url": "https://pkg.go.dev/vuln/GO-2024-2611"
        }
      ],
      "release_date": "2024-03-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-23T13:02:37+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:0664"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON"
    },
    {
      "cve": "CVE-2024-40094",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2024-07-30T07:20:08+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2301456"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40094"
        },
        {
          "category": "external",
          "summary": "RHBZ#2301456",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301456"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40094",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40094"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40094",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40094"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a",
          "url": "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/discussions/3641",
          "url": "https://github.com/graphql-java/graphql-java/discussions/3641"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/pull/3539",
          "url": "https://github.com/graphql-java/graphql-java/pull/3539"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/releases/tag/v19.11",
          "url": "https://github.com/graphql-java/graphql-java/releases/tag/v19.11"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/releases/tag/v20.9",
          "url": "https://github.com/graphql-java/graphql-java/releases/tag/v20.9"
        },
        {
          "category": "external",
          "summary": "https://github.com/graphql-java/graphql-java/releases/tag/v21.5",
          "url": "https://github.com/graphql-java/graphql-java/releases/tag/v21.5"
        }
      ],
      "release_date": "2024-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-23T13:02:37+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:0664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java"
    },
    {
      "cve": "CVE-2024-45296",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2024-09-09T19:20:18.127723+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2310908"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in path-to-regexp package, where it turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single-threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "path-to-regexp: Backtracking regular expressions cause ReDoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
          "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45296"
        },
        {
          "category": "external",
          "summary": "RHBZ#2310908",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310908"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45296",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45296"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296"
        },
        {
          "category": "external",
          "summary": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f",
          "url": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f"
        },
        {
          "category": "external",
          "summary": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6",
          "url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6"
        },
        {
          "category": "external",
          "summary": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j",
          "url": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j"
        }
      ],
      "release_date": "2024-09-09T19:15:13.330000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-23T13:02:37+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:0664"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
            "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "path-to-regexp: Backtracking regular expressions cause ReDoS"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.