Vulnerability-Lookup

RHSA-2026:24473

Vulnerability from csaf_redhat - Published: 2026-06-08 12:51 - Updated: 2026-06-10 21:45

Summary

Red Hat Security Advisory: Network Observability 1.12.0 for OpenShift

Severity

Important

Notes

Topic: Network Observability 1.12 for Red Hat OpenShift.

Details: Network flows collector and monitoring solution.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-6321

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x	—	Vendor Fix fix

Known not affected 25 products

Product	Identifier	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64		—

Threats

Impact Important

CVE-2026-29063

A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64	—	Vendor Fix fix

Known not affected 25 products

Product	Identifier	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64		—

Threats

Impact Important

CVE-2026-32281

A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64	—	Vendor Fix fix Workaround

Known not affected 25 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-42039

A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le	—	Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64	—	Vendor Fix fix

Known not affected 25 products

Product	Identifier	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le		—
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64		—

Threats

Impact Important

CVE-2026-42044

A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x	—	Vendor Fix fix Workaround

Known not affected 21 products

Product	Version	Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le	—	Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64	—	Workaround

Threats

Impact Important

References

41 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:24473	self
https://access.redhat.com/security/cve/CVE-2026-29063	external
https://access.redhat.com/security/cve/CVE-2026-32281	external
https://access.redhat.com/security/cve/CVE-2026-42039	external
https://access.redhat.com/security/cve/CVE-2026-42044	external
https://access.redhat.com/security/cve/CVE-2026-6321	external
https://access.redhat.com/security/updates/classi…	external
https://docs.openshift.com/container-platform/lat…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-6321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466582	external
https://www.cve.org/CVERecord?id=CVE-2026-6321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6321	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-29063	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445291	external
https://www.cve.org/CVERecord?id=CVE-2026-29063	external
https://nvd.nist.gov/vuln/detail/CVE-2026-29063	external
https://github.com/immutable-js/immutable-js/rele…	external
https://github.com/immutable-js/immutable-js/rele…	external
https://github.com/immutable-js/immutable-js/rele…	external
https://github.com/immutable-js/immutable-js/secu…	external
https://access.redhat.com/security/cve/CVE-2026-32281	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456333	external
https://www.cve.org/CVERecord?id=CVE-2026-32281	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32281	external
https://go.dev/cl/758061	external
https://go.dev/issue/78281	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4946	external
https://access.redhat.com/security/cve/CVE-2026-42039	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461630	external
https://www.cve.org/CVERecord?id=CVE-2026-42039	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42039	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42044	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461624	external
https://www.cve.org/CVERecord?id=CVE-2026-42044	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42044	external
https://github.com/axios/axios/security/advisorie…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Network Observability 1.12 for Red Hat OpenShift.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Network flows collector and monitoring solution.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:24473",
        "url": "https://access.redhat.com/errata/RHSA-2026:24473"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
        "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6321",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6321"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html",
        "url": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24473.json"
      }
    ],
    "title": "Red Hat Security Advisory: Network Observability 1.12.0 for OpenShift",
    "tracking": {
      "current_release_date": "2026-06-10T21:45:30+00:00",
      "generator": {
        "date": "2026-06-10T21:45:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:24473",
      "initial_release_date": "2026-06-08T12:51:19+00:00",
      "revision_history": [
        {
          "date": "2026-06-08T12:51:19+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-08T12:51:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-10T21:45:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Network Observability (NETOBSERV) 1.12.0",
                "product": {
                  "name": "Network Observability (NETOBSERV) 1.12.0",
                  "product_id": "Network Observability (NETOBSERV) 1.12.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_observ_optr:1.12::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Network Observability (NETOBSERV)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3Ab3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1780555437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Aaf9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1780555568"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1780555785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1780920979"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3Ac392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1780921100"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1780556069"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-operator-bundle@sha256%3A3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-operator-bundle\u0026tag=1780921818"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1780555442"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1780555437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Ad683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1780555568"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1780555785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1780920979"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1780921100"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1780556069"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3Ad54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1780555442"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1780555437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Af156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1780555568"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Ab29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1780555785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1780920979"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1780921100"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1780556069"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1780555442"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1780555437"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1780555568"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Ad989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1780555785"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1780920979"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1780921100"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3Ab84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1780556069"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1780555442"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64 as a component of Network Observability (NETOBSERV) 1.12.0",
          "product_id": "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6321",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-05-04T20:01:14.938426+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
        }
      ],
      "release_date": "2026-05-04T19:31:57.253000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T12:51:19+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24473"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
    },
    {
      "cve": "CVE-2026-29063",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-03-06T19:00:57.982727+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445291"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445291",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
        }
      ],
      "release_date": "2026-03-06T18:25:22.438000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T12:51:19+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24473"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T12:51:19+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24473"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-42039",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T19:01:44.887156+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
        }
      ],
      "release_date": "2026-04-24T18:01:30.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T12:51:19+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24473"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
    },
    {
      "cve": "CVE-2026-42044",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-04-24T19:01:13.418725+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
          "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
        }
      ],
      "release_date": "2026-04-24T17:49:49.517000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T12:51:19+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24473"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le",
            "Network Observability (NETOBSERV) 1.12.0:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
    }
  ]
}

CVE-2026-29063 (GCVE-0-2026-29063)

Vulnerability from cvelistv5 – Published: 2026-03-06 18:25 – Updated: 2026-03-06 19:33

Title

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

Summary

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Assigner

GitHub_M

References

4 references

URL	Tags
https://github.com/immutable-js/immutable-js/secu…	x_refsource_CONFIRM
https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC
https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC
https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
immutable-js	immutable-js	Affected: < 3.8.3 Affected: < 4.3.7 Affected: < 5.1.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29063",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:32:37.694711Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:33:31.642Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "immutable-js",
          "vendor": "immutable-js",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.8.3"
            },
            {
              "status": "affected",
              "version": "\u003c 4.3.7"
            },
            {
              "status": "affected",
              "version": "\u003c 5.1.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-06T18:25:22.438Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
        }
      ],
      "source": {
        "advisory": "GHSA-wf6x-7x77-mvgw",
        "discovery": "UNKNOWN"
      },
      "title": "Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) in immutable"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-29063",
    "datePublished": "2026-03-06T18:25:22.438Z",
    "dateReserved": "2026-03-03T20:51:43.481Z",
    "dateUpdated": "2026-03-06T19:33:31.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32281 (GCVE-0-2026-32281)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-13 18:19

Title

Inefficient policy validation in crypto/x509

Summary

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

References

4 references

URL	Tags
https://go.dev/cl/758061
https://go.dev/issue/78281
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4946

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Jakub Ciolek - https://ciolek.dev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32281",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:52:37.734298Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:19:44.779Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "policiesValid"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:58.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/758061"
        },
        {
          "url": "https://go.dev/issue/78281"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "title": "Inefficient policy validation in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32281",
    "datePublished": "2026-04-08T01:06:58.354Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-04-13T18:19:44.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42039 (GCVE-0-2026-42039)

Vulnerability from cvelistv5 – Published: 2026-04-24 18:01 – Updated: 2026-04-24 18:14

Title

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data

Summary

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-674 - Uncontrolled Recursion

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/axios/axios/security/advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
axios	axios	Affected: >= 1.0.0, < 1.15.1 Affected: < 0.31.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42039",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T18:14:11.509943Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-24T18:14:37.802Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "axios",
          "vendor": "axios",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.15.1"
            },
            {
              "status": "affected",
              "version": "\u003c 0.31.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674: Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-24T18:01:30.775Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
        }
      ],
      "source": {
        "advisory": "GHSA-62hf-57xw-28j9",
        "discovery": "UNKNOWN"
      },
      "title": "Axios: unbounded recursion in toFormData causes DoS via deeply nested request data"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42039",
    "datePublished": "2026-04-24T18:01:30.775Z",
    "dateReserved": "2026-04-23T16:05:01.709Z",
    "dateUpdated": "2026-04-24T18:14:37.802Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42044 (GCVE-0-2026-42044)

Vulnerability from cvelistv5 – Published: 2026-04-24 17:49 – Updated: 2026-04-24 18:12

Title

Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Summary

Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into surgical, invisible modification of all JSON API responses — including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/axios/axios/security/advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
axios	axios	Affected: >= 1.0.0, < 1.15.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42044",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T18:11:49.647774Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-24T18:12:13.920Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "axios",
          "vendor": "axios",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.15.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application\u0027s dependency tree to be escalated into surgical, invisible modification of all JSON API responses \u2014 including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, this.parseReviver), where this is the merged config object. Because parseReviver is not present in Axios defaults, not validated by assertOptions, and not subject to any constraints, a polluted Object.prototype.parseReviver function is called for every key-value pair in every JSON response, allowing the attacker to selectively modify individual values while leaving the rest of the response intact. This vulnerability is fixed in 1.15.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-915",
              "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-24T17:50:26.586Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
        }
      ],
      "source": {
        "advisory": "GHSA-3w6x-2g7m-8v23",
        "discovery": "UNKNOWN"
      },
      "title": "Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42044",
    "datePublished": "2026-04-24T17:49:49.517Z",
    "dateReserved": "2026-04-23T16:05:01.709Z",
    "dateUpdated": "2026-04-24T18:12:13.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6321 (GCVE-0-2026-6321)

Vulnerability from cvelistv5 – Published: 2026-05-04 19:31 – Updated: 2026-05-05 12:44

Title

fast-uri vulnerable to path traversal via percent-encoded dot segments

Summary

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions <= 3.1.0 are affected. Update to 3.1.1 or later.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

openjs

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 0 , < 3.1.1 (semver) Unaffected: 3.1.1 (semver)

Credits

Jvr Matteo Collina Ulises Gascón KaKa

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-05T12:44:27.336265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T12:44:34.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "3.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jvr"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Matteo Collina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ulises Gasc\u00f3n"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "KaKa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
            }
          ],
          "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T19:31:57.253Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to path traversal via percent-encoded dot segments",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-6321",
    "datePublished": "2026-05-04T19:31:57.253Z",
    "dateReserved": "2026-04-14T20:23:01.545Z",
    "dateUpdated": "2026-05-05T12:44:34.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:24473

CVE-2026-29063 (GCVE-0-2026-29063)

CVE-2026-32281 (GCVE-0-2026-32281)

CVE-2026-42039 (GCVE-0-2026-42039)

CVE-2026-42044 (GCVE-0-2026-42044)

CVE-2026-6321 (GCVE-0-2026-6321)

Tags

Sightings

Nomenclature