{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:33154",
        "url": "https://access.redhat.com/errata/RHSA-2026:33154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-12905",
        "url": "https://access.redhat.com/security/cve/CVE-2024-12905"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-55565",
        "url": "https://access.redhat.com/security/cve/CVE-2024-55565"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-6345",
        "url": "https://access.redhat.com/security/cve/CVE-2024-6345"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
        "url": "https://access.redhat.com/security/cve/CVE-2025-13465"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-45768",
        "url": "https://access.redhat.com/security/cve/CVE-2025-45768"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47913",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47913"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-50181",
        "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-52555",
        "url": "https://access.redhat.com/security/cve/CVE-2025-52555"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-5889",
        "url": "https://access.redhat.com/security/cve/CVE-2025-5889"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59343",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59343"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
        "url": "https://access.redhat.com/security/cve/CVE-2026-21441"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33154.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ceph Storage",
    "tracking": {
      "current_release_date": "2026-06-30T04:33:30+00:00",
      "generator": {
        "date": "2026-06-30T04:33:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2026:33154",
      "initial_release_date": "2026-06-29T15:52:25+00:00",
      "revision_history": [
        {
          "date": "2026-06-29T15:52:25+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-29T15:52:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T04:33:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 7.1",
                "product": {
                  "name": "Red Hat Ceph Storage 7.1",
                  "product_id": "Red Hat Ceph Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:7.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1781855851"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781856344"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3Ada760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1781855108"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1781856148"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3Abe5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1781863705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1781854814"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3Afebdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1781855851"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781856344"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1781855108"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1781856148"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3Afe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1781863705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1781854814"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3Aeb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1781855851"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781856344"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1781855108"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3Aee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1781856148"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-7-rhel9@sha256%3A57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-7-rhel9\u0026tag=1781863705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Aeb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1781854814"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64 as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le as a component of Red Hat Ceph Storage 7.1",
          "product_id": "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 7.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6345",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2024-07-15T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2297771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack does not include setuptools. The ImcSdk component uses it only during compile time in our build systems, and we do not support recompiling SRPMs. As a result, Red Hat OpenStack is not affected by this flaw.\n\nPython 2.7.18 was marked End of Life on 04/20/2020. No patches for Python 2 would be made available.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-6345"
        },
        {
          "category": "external",
          "summary": "RHBZ#2297771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-6345",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6345",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6345"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0",
          "url": "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5",
          "url": "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5"
        }
      ],
      "release_date": "2024-07-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools"
    },
    {
      "cve": "CVE-2024-12905",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2025-03-27T17:02:14.911888+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2355460"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the tar-fs package for Node.js. In affected versions, unauthorized file writes or overwrites outside the intended extraction directory can occur when extracting a maliciously crafted tar file. The issue is associated with index.js in the tar-fs package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tar-fs: link following and path traversal via maliciously crafted tar file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an important severity because it allows attackers to extract a malicious tar file that can write or overwrite files outside the intended directory. This occurs due to improper handling of link resolution and pathname limitations. The risk is high for systems that automatically extract tar files, as it can lead to data corruption or unauthorized file modifications without user interaction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-12905"
        },
        {
          "category": "external",
          "summary": "RHBZ#2355460",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2355460"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-12905",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-12905"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-12905",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12905"
        },
        {
          "category": "external",
          "summary": "https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed",
          "url": "https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed"
        }
      ],
      "release_date": "2025-03-27T16:25:34.410000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tar-fs: link following and path traversal via maliciously crafted tar file"
    },
    {
      "cve": "CVE-2024-55565",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-12-09T02:00:45.255738+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331063"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid. Affected versions of nanoid mishandles non-integer values. When nanoid is called with a fractional value, there were a number of undesirable effects:\n\n- In browser and non-secure, the code infinite loops on while (size--)\n- In node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled: when i is initialized to poolOffset, pool[i] \u0026 63 -\u003e undefined \u0026 63 -\u003e 0\n- If the first call in node is a fractional argument, the initial buffer allocation fails with an error\n\nThe highest impact of this issue system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid mishandles non-integer values",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331063",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331063"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-55565",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8",
          "url": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/pull/510",
          "url": "https://github.com/ai/nanoid/pull/510"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.0.9",
          "url": "https://github.com/ai/nanoid/releases/tag/5.0.9"
        }
      ],
      "release_date": "2024-12-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nanoid: nanoid mishandles non-integer values"
    },
    {
      "cve": "CVE-2025-5889",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2025-06-09T19:00:43.176857+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2371270"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service (DoS) vulnerability has been identified in the brace-expansion JavaScript package. This issue occurs due to inefficient regular expression complexity, which can be exploited by an attacker providing specially crafted input. Such input could lead to excessive processing time and resource consumption, rendering applications that utilize this package unresponsive and causing a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: juliangruber brace-expansion index.js expand redos",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5889"
        },
        {
          "category": "external",
          "summary": "RHBZ#2371270",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2371270"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5889",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5889",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5889"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466",
          "url": "https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5",
          "url": "https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?ctiid.311660",
          "url": "https://vuldb.com/?ctiid.311660"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?id.311660",
          "url": "https://vuldb.com/?id.311660"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?submit.585717",
          "url": "https://vuldb.com/?submit.585717"
        }
      ],
      "release_date": "2025-06-09T18:16:01.889000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Currently, no mitigation is available for this vulnerability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "brace-expansion: juliangruber brace-expansion index.js expand redos"
    },
    {
      "cve": "CVE-2025-13465",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "discovery_date": "2026-01-21T20:01:28.774829+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2431740"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "lodash: prototype pollution in _.unset and _.omit functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-13465"
        },
        {
          "category": "external",
          "summary": "RHBZ#2431740",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
        },
        {
          "category": "external",
          "summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
          "url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
        }
      ],
      "release_date": "2026-01-21T19:05:28.846000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "lodash: prototype pollution in _.unset and _.omit functions"
    },
    {
      "cve": "CVE-2025-45768",
      "discovery_date": "2025-07-31T21:01:30.698283+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyjwt. The library uses weak encryption, allowing an attacker to potentially decrypt sensitive data. A network-based attacker can exploit this vulnerability without authentication, possibly resulting in a denial of service or data exposure. This weakness stems from the use of inadequate cryptographic algorithms.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "This CVE has been disputed by the PyJWT. The developers of PyJWT confirm that this issue is not a flaw in the library\u0027s function but rather a potential risk if an application developer chooses to use weak, short cryptographic keys.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-45768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-45768",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-45768"
        }
      ],
      "release_date": "2025-07-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 0.0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "pyjwt: pyjwt Weak Encryption Vulnerability"
    },
    {
      "cve": "CVE-2025-47913",
      "discovery_date": "2025-11-13T22:01:26.092452+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2414943"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic(\"unreachable\") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was marked as Important because it allows any malicious or misbehaving SSH agent to force a crash in the client process using a single valid protocol byte. The panic occurs before the client has a chance to validate message structure or recover, which means an attacker controlling\u2014or intercepting\u2014SSH agent traffic can reliably terminate processes that rely on agent interactions. In environments where SSH agents operate over forwarded sockets, shared workspaces, or CI/CD runners, this turns into a reliable, unauthenticated remote denial of service against critical automation or developer tooling. The flaw also stems from unsafe assumptions in the unmarshalling logic, where unexpected but protocol-legal message types drop into \u201cunreachable\u201d code paths instead of being handled gracefully\u2014making it a design-level reliability break rather than a simple error-handling bug. For this reason, it is rated as an important availability-impacting vulnerability rather than a moderate issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "RHBZ#2414943",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414943"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-hcg3-q754-cr77",
          "url": "https://github.com/advisories/GHSA-hcg3-q754-cr77"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/700295",
          "url": "https://go.dev/cl/700295"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/75178",
          "url": "https://go.dev/issue/75178"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4116",
          "url": "https://pkg.go.dev/vuln/GO-2025-4116"
        }
      ],
      "release_date": "2025-11-13T21:29:39.907000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS"
    },
    {
      "cve": "CVE-2025-50181",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2025-06-19T02:00:42.866992+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373799"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the urllib3 library where it could be tricked into disclosing the Proxy-Authorization header to a destination server when a CONNECT tunnel is used. An attacker can set up a malicious redirect to a crafted URL, which, when followed by the client application, will cause the Proxy-Authorization header to be sent to the attacker-controlled server. This leaks sensitive credentials for the proxy. The impact is primarily on confidentiality. While urllib3 is a ubiquitous component, the vulnerability requires a specific scenario where a user is connecting to a proxy that requires authentication and is redirected to a malicious endpoint. This lowers the exploitability compared to a direct, unauthenticated remote attack, thus, warranting a Moderate severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373799",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373799"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-50181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857",
          "url": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"
        }
      ],
      "release_date": "2025-06-19T01:08:00.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation"
    },
    {
      "cve": "CVE-2025-52555",
      "cwe": {
        "id": "CWE-272",
        "name": "Least Privilege Violation"
      },
      "discovery_date": "2025-06-23T21:07:48.565000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2374412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Ceph was discovered whereby an unprivileged user could change the permissions of a directory owned by the root user, gaining access to the targeted directory. The non-privileged user can escalate privileges to root in a CephFS mounted with ceph-fuse by applying chmod 777 (read, write, and execute for all users) to any directory owned by root. This allows the user to read, write, and execute to that directory even if they were not the original owner. The vulnerability could potentially allow a user to gain unauthorized access or modify critical system data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-52555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2374412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-52555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-52555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52555"
        },
        {
          "category": "external",
          "summary": "https://github.com/ceph/ceph/pull/60314",
          "url": "https://github.com/ceph/ceph/pull/60314"
        },
        {
          "category": "external",
          "summary": "https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm",
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm"
        }
      ],
      "release_date": "2025-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Red Hat Product Security does not have any recommended mitigations at this time. Please update as patched versions become available.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS"
    },
    {
      "cve": "CVE-2025-59343",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-09-24T18:01:19.612438+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A symlink validation bypass flaw has been discovered in the npm tar-fs library. Affected versions are vulnerable to a symlink validation bypass if the destination directory is predictable with a specific tarball.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tar-fs: tar-fs symlink validation bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09",
          "url": "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09"
        },
        {
          "category": "external",
          "summary": "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v",
          "url": "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v"
        }
      ],
      "release_date": "2025-09-24T17:43:34.728000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tar-fs: tar-fs symlink validation bypass"
    },
    {
      "cve": "CVE-2026-21441",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-01-07T23:01:59.422078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2427726"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
          "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21441"
        },
        {
          "category": "external",
          "summary": "RHBZ#2427726",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
          "url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
        }
      ],
      "release_date": "2026-01-07T22:09:01.936000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-29T15:52:25+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:33154"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64le",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390x",
            "Red Hat Ceph Storage 7.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
    }
  ]
}