RHSA-2026:34342

Vulnerability from csaf_redhat - Published: 2026-07-01 14:36 - Updated: 2026-09-26 21:11
Summary
Red Hat Security Advisory: Cluster Observability Operator 1.5.0
Severity
Critical
Notes
Topic: The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Details: The 1.5 release of COO.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2020-7753

A flaw was found in the npm library trim where a specifically crafted input can cause a regular expression to take an abnormal amount of time to compute. All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) [DNP] via trim().

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-185 - Incorrect Regular Expression
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Threats
Impact Moderate
CVE-2021-33623

A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 4 products, the same list as for CVE-2020-7753
Known not affected 93 products, the same list as for CVE-2020-7753
Threats
Impact Moderate
CVE-2024-4068

A flaw was found in the NPM package `braces.` It fails to limit the number of characters it can handle, which could lead to memory exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, causing the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 4 products, the same list as for CVE-2020-7753
Known not affected 93 products, the same list as for CVE-2020-7753
Threats
Impact Moderate
CVE-2024-45338

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Threats
Impact Important
CVE-2024-52011

A flaw was found in launch-editor, a tool that allows users to open files with line numbers in an editor from Node.js. Due to insufficient sanitization of the `file` argument in the `launchEditor` function, an attacker can execute arbitrary commands on Windows systems by supplying a filename that contains special characters. This can lead to a complete compromise of the affected system.

8.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Workaround
Threats
Impact Important
CVE-2025-22868

A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1286 - Improper Validation of Syntactic Correctness of Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Workaround
Threats
Impact Important
CVE-2025-22870

A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable.

4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CWE-20 - Improper Input Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Workaround
Threats
Impact Moderate
CVE-2025-22872

A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a (/) in tags within foreign content contexts such as <math> or <svg>.

6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 24 products, the same list as for CVE-2025-22870
Known not affected 73 products, the same list as for CVE-2025-22870
Threats
Impact Moderate
CVE-2025-47911

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 24 products, the same list as for CVE-2025-22870
Known not affected 73 products, the same list as for CVE-2025-22870
Threats
Impact Moderate
CVE-2025-58190

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 24 products, the same list as for CVE-2025-22870
Known not affected 73 products, the same list as for CVE-2025-22870
Threats
Impact Moderate
CVE-2026-1526

A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a "decompression bomb," during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Workaround
Threats
Impact Important
CVE-2026-1528

A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-248 - Uncaught Exception
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-2229

A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-248 - Uncaught Exception
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-4800

A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-4867

A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic backtracking. The overlapping capture groups can consume excessive processing resources, resulting in a Denial of Service (DoS) for the affected application.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Moderate
CVE-2026-6321

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Threats
Impact Important
CVE-2026-6322

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 40 products, the same list as for CVE-2026-6321
Known not affected 57 products, the same list as for CVE-2026-6321
Threats
Impact Important
CVE-2026-6734

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-940 - Improper Verification of Source of a Communication Channel
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Workaround
Threats
Impact Important
CVE-2026-9277

A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Threats
Impact Important
CVE-2026-9697

A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 36 products, the same list as for CVE-2026-6734
Known not affected 61 products, the same list as for CVE-2026-6734
Threats
Impact Important
CVE-2026-12143

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
Affected products
Fixed 48 products, the same list as for CVE-2026-9277
Known not affected 49 products, the same list as for CVE-2026-9277
Threats
Impact Important
CVE-2026-12151

A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 48 products, the same list as for CVE-2026-9277
Known not affected 49 products, the same list as for CVE-2026-9277
Threats
Impact Important
CVE-2026-25680

A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le —
Workaround
Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x —
Workaround
Threats
Impact Moderate
CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 36 products, the same list as for CVE-2026-25680
Known not affected 61 products, the same list as for CVE-2026-25680
Threats
Impact Important
CVE-2026-29063

A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-32141

A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-33228

A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Critical
CVE-2026-33671

A flaw was found in Picomatch, a JavaScript glob matcher. This Regular Expression Denial of Service (ReDoS) vulnerability allows a remote attacker to cause excessive CPU consumption and block the Node.js event loop, leading to a denial of service. This occurs when untrusted users supply crafted extglob patterns, specifically those using quantifiers like `+()` and `*()` combined with overlapping alternatives or nested extglobs, which can trigger catastrophic backtracking in the compiled regular expressions.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1333 - Inefficient Regular Expression Complexity
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Moderate
CVE-2026-33814

A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 36 products, the same list as for CVE-2026-25680
Known not affected 61 products, the same list as for CVE-2026-25680
Threats
Impact Important
CVE-2026-33891

A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2024-45338
Known not affected 93 products, the same list as for CVE-2024-45338
Threats
Impact Important
CVE-2026-33894

A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 4 products, the same list as for CVE-2024-45338
Known not affected 93 products, the same list as for CVE-2024-45338
Threats
Impact Important
CVE-2026-33895

A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library's Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 4 products, the same list as for CVE-2024-45338
Known not affected 93 products, the same list as for CVE-2024-45338
Threats
Impact Important
CVE-2026-33896

A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2024-45338
Known not affected 93 products, the same list as for CVE-2024-45338
Threats
Impact Important
CVE-2026-33937

A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-33938

A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{> @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-33939

A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-248 - Uncaught Exception
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-33940

A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-33941

A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.

8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 12 products, the same list as for CVE-2026-1526
Known not affected 85 products, the same list as for CVE-2026-1526
Threats
Impact Important
CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 36 products, the same list as for CVE-2026-25680
Known not affected 61 products, the same list as for CVE-2026-25680
Threats
Impact Important
CVE-2026-42506

A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.

5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 36 products, the same list as for CVE-2026-25680
Known not affected 61 products, the same list as for CVE-2026-25680
Threats
Impact Moderate
CVE-2026-48779

A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 48 products, the same list as for CVE-2026-9277
Known not affected 49 products, the same list as for CVE-2026-9277
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:34342 self
https://access.redhat.com/security/cve/CVE-2020-7753 external
https://access.redhat.com/security/cve/CVE-2021-33623 external
https://access.redhat.com/security/cve/CVE-2024-4068 external
https://access.redhat.com/security/cve/CVE-2024-45338 external
https://access.redhat.com/security/cve/CVE-2024-52011 external
https://access.redhat.com/security/cve/CVE-2025-22868 external
https://access.redhat.com/security/cve/CVE-2025-22870 external
https://access.redhat.com/security/cve/CVE-2025-22872 external
https://access.redhat.com/security/cve/CVE-2025-47911 external
https://access.redhat.com/security/cve/CVE-2025-58190 external
https://access.redhat.com/security/cve/CVE-2026-12143 external
https://access.redhat.com/security/cve/CVE-2026-12151 external
https://access.redhat.com/security/cve/CVE-2026-1526 external
https://access.redhat.com/security/cve/CVE-2026-1528 external
https://access.redhat.com/security/cve/CVE-2026-2229 external
https://access.redhat.com/security/cve/CVE-2026-25680 external
https://access.redhat.com/security/cve/CVE-2026-25681 external
https://access.redhat.com/security/cve/CVE-2026-29063 external
https://access.redhat.com/security/cve/CVE-2026-32141 external
https://access.redhat.com/security/cve/CVE-2026-33228 external
https://access.redhat.com/security/cve/CVE-2026-33671 external
https://access.redhat.com/security/cve/CVE-2026-33814 external
https://access.redhat.com/security/cve/CVE-2026-33891 external
https://access.redhat.com/security/cve/CVE-2026-33894 external
https://access.redhat.com/security/cve/CVE-2026-33895 external
https://access.redhat.com/security/cve/CVE-2026-33896 external
https://access.redhat.com/security/cve/CVE-2026-33937 external
https://access.redhat.com/security/cve/CVE-2026-33938 external
https://access.redhat.com/security/cve/CVE-2026-33939 external
https://access.redhat.com/security/cve/CVE-2026-33940 external
https://access.redhat.com/security/cve/CVE-2026-33941 external
https://access.redhat.com/security/cve/CVE-2026-39821 external
https://access.redhat.com/security/cve/CVE-2026-42506 external
https://access.redhat.com/security/cve/CVE-2026-4800 external
https://access.redhat.com/security/cve/CVE-2026-4867 external
https://access.redhat.com/security/cve/CVE-2026-48779 external
https://access.redhat.com/security/cve/CVE-2026-6321 external
https://access.redhat.com/security/cve/CVE-2026-6322 external
https://access.redhat.com/security/cve/CVE-2026-6734 external
https://access.redhat.com/security/cve/CVE-2026-9277 external
https://access.redhat.com/security/cve/CVE-2026-9697 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/updates/classi… external
https://docs.openshift.com/container-platform/lat… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2020-7753 self
https://bugzilla.redhat.com/show_bug.cgi?id=1891860 external
https://www.cve.org/CVERecord?id=CVE-2020-7753 external
https://nvd.nist.gov/vuln/detail/CVE-2020-7753 external
https://github.com/component/trim/blob/master/ind… external
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132 external
https://snyk.io/vuln/SNYK-JS-TRIM-1017038 external
https://access.redhat.com/security/cve/CVE-2021-33623 self
https://bugzilla.redhat.com/show_bug.cgi?id=1966615 external
https://www.cve.org/CVERecord?id=CVE-2021-33623 external
https://nvd.nist.gov/vuln/detail/CVE-2021-33623 external
https://access.redhat.com/security/cve/CVE-2024-4068 self
https://bugzilla.redhat.com/show_bug.cgi?id=2280600 external
https://www.cve.org/CVERecord?id=CVE-2024-4068 external
https://nvd.nist.gov/vuln/detail/CVE-2024-4068 external
https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ external
https://github.com/micromatch/braces/blob/98414f9… external
https://github.com/micromatch/braces/issues/35 external
https://access.redhat.com/security/cve/CVE-2024-45338 self
https://bugzilla.redhat.com/show_bug.cgi?id=2333122 external
https://www.cve.org/CVERecord?id=CVE-2024-45338 external
https://nvd.nist.gov/vuln/detail/CVE-2024-45338 external
https://go.dev/cl/637536 external
https://go.dev/issue/70906 external
https://groups.google.com/g/golang-announce/c/wSC… external
https://pkg.go.dev/vuln/GO-2024-3333 external
https://access.redhat.com/security/cve/CVE-2024-52011 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483853 external
https://www.cve.org/CVERecord?id=CVE-2024-52011 external
https://nvd.nist.gov/vuln/detail/CVE-2024-52011 external
https://github.com/vitejs/launch-editor/commit/97… external
https://github.com/vitejs/launch-editor/security/… external
https://access.redhat.com/security/cve/CVE-2025-22868 self
https://bugzilla.redhat.com/show_bug.cgi?id=2348366 external
https://www.cve.org/CVERecord?id=CVE-2025-22868 external
https://nvd.nist.gov/vuln/detail/CVE-2025-22868 external
https://go.dev/cl/652155 external
https://go.dev/issue/71490 external
https://pkg.go.dev/vuln/GO-2025-3488 external
https://access.redhat.com/security/cve/CVE-2025-22870 self
https://bugzilla.redhat.com/show_bug.cgi?id=2351766 external
https://www.cve.org/CVERecord?id=CVE-2025-22870 external
https://nvd.nist.gov/vuln/detail/CVE-2025-22870 external
https://go.dev/cl/654697 external
https://go.dev/issue/71984 external
https://pkg.go.dev/vuln/GO-2025-3503 external
https://access.redhat.com/security/cve/CVE-2025-22872 self
https://bugzilla.redhat.com/show_bug.cgi?id=2360404 external
https://www.cve.org/CVERecord?id=CVE-2025-22872 external
https://nvd.nist.gov/vuln/detail/CVE-2025-22872 external
https://github.com/advisories/GHSA-vvgc-356p-c3xw external
https://go.dev/cl/662715 external
https://go.dev/issue/73070 external
https://groups.google.com/g/golang-announce/c/ezS… external
https://pkg.go.dev/vuln/GO-2025-3595 external
https://access.redhat.com/security/cve/CVE-2025-47911 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437109 external
https://www.cve.org/CVERecord?id=CVE-2025-47911 external
https://nvd.nist.gov/vuln/detail/CVE-2025-47911 external
https://github.com/golang/vulndb/issues/4440 external
https://go.dev/cl/709876 external
https://groups.google.com/g/golang-announce/c/jnQ… external
https://pkg.go.dev/vuln/GO-2026-4440 external
https://access.redhat.com/security/cve/CVE-2025-58190 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437110 external
https://www.cve.org/CVERecord?id=CVE-2025-58190 external
https://nvd.nist.gov/vuln/detail/CVE-2025-58190 external
https://github.com/golang/vulndb/issues/4441 external
https://go.dev/cl/709875 external
https://pkg.go.dev/vuln/GO-2026-4441 external
https://access.redhat.com/security/cve/CVE-2026-1526 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447142 external
https://www.cve.org/CVERecord?id=CVE-2026-1526 external
https://nvd.nist.gov/vuln/detail/CVE-2026-1526 external
https://cna.openjsf.org/security-advisories.html external
https://datatracker.ietf.org/doc/html/rfc7692 external
https://github.com/nodejs/undici/security/advisor… external
https://hackerone.com/reports/3481206 external
https://access.redhat.com/security/cve/CVE-2026-1528 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447145 external
https://www.cve.org/CVERecord?id=CVE-2026-1528 external
https://nvd.nist.gov/vuln/detail/CVE-2026-1528 external
https://github.com/nodejs/undici/security/advisor… external
https://hackerone.com/reports/3537648 external
https://access.redhat.com/security/cve/CVE-2026-2229 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447143 external
https://www.cve.org/CVERecord?id=CVE-2026-2229 external
https://nvd.nist.gov/vuln/detail/CVE-2026-2229 external
https://github.com/nodejs/undici/security/advisor… external
https://hackerone.com/reports/3487486 external
https://nodejs.org/api/zlib.html#class-zlibinflateraw external
https://access.redhat.com/security/cve/CVE-2026-4800 self
https://bugzilla.redhat.com/show_bug.cgi?id=2453496 external
https://www.cve.org/CVERecord?id=CVE-2026-4800 external
https://nvd.nist.gov/vuln/detail/CVE-2026-4800 external
https://github.com/advisories/GHSA-35jh-r3h4-6jhm external
https://github.com/lodash/lodash/commit/3469357cf… external
https://access.redhat.com/security/cve/CVE-2026-4867 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451783 external
https://www.cve.org/CVERecord?id=CVE-2026-4867 external
https://nvd.nist.gov/vuln/detail/CVE-2026-4867 external
https://blakeembrey.com/posts/2024-09-web-redos external
https://github.com/advisories/GHSA-9wv6-86v2-598j external
https://access.redhat.com/security/cve/CVE-2026-6321 self
https://bugzilla.redhat.com/show_bug.cgi?id=2466582 external
https://www.cve.org/CVERecord?id=CVE-2026-6321 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6321 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-6322 self
https://bugzilla.redhat.com/show_bug.cgi?id=2466684 external
https://www.cve.org/CVERecord?id=CVE-2026-6322 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6322 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-6734 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490024 external
https://www.cve.org/CVERecord?id=CVE-2026-6734 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6734 external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-9277 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480741 external
https://www.cve.org/CVERecord?id=CVE-2026-9277 external
https://nvd.nist.gov/vuln/detail/CVE-2026-9277 external
https://github.com/ljharb/shell-quote external
https://github.com/ljharb/shell-quote/commit/1518179 external
https://github.com/ljharb/shell-quote/security/ad… external
https://www.npmjs.com/package/shell-quote external
https://access.redhat.com/security/cve/CVE-2026-9697 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490018 external
https://www.cve.org/CVERecord?id=CVE-2026-9697 external
https://nvd.nist.gov/vuln/detail/CVE-2026-9697 external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-12143 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488480 external
https://www.cve.org/CVERecord?id=CVE-2026-12143 external
https://nvd.nist.gov/vuln/detail/CVE-2026-12143 external
https://cwe.mitre.org/data/definitions/93.html external
https://github.com/form-data/form-data/commit/641… external
https://github.com/form-data/form-data/commit/be3… external
https://github.com/form-data/form-data/commit/c71… external
https://github.com/form-data/form-data/security/a… external
https://html.spec.whatwg.org/multipage/form-contr… external
https://www.npmjs.com/package/form-data external
https://access.redhat.com/security/cve/CVE-2026-12151 self
https://bugzilla.redhat.com/show_bug.cgi?id=2489980 external
https://www.cve.org/CVERecord?id=CVE-2026-12151 external
https://nvd.nist.gov/vuln/detail/CVE-2026-12151 external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-25680 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480760 external
https://www.cve.org/CVERecord?id=CVE-2026-25680 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25680 external
https://go.dev/cl/781702 external
https://go.dev/issue/79573 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5028 external
https://access.redhat.com/security/cve/CVE-2026-25681 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://www.cve.org/CVERecord?id=CVE-2026-25681 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 external
https://go.dev/cl/781703 external
https://go.dev/issue/79574 external
https://pkg.go.dev/vuln/GO-2026-5029 external
https://access.redhat.com/security/cve/CVE-2026-29063 self
https://bugzilla.redhat.com/show_bug.cgi?id=2445291 external
https://www.cve.org/CVERecord?id=CVE-2026-29063 external
https://nvd.nist.gov/vuln/detail/CVE-2026-29063 external
https://github.com/immutable-js/immutable-js/rele… external
https://github.com/immutable-js/immutable-js/rele… external
https://github.com/immutable-js/immutable-js/rele… external
https://github.com/immutable-js/immutable-js/secu… external
https://access.redhat.com/security/cve/CVE-2026-32141 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447083 external
https://www.cve.org/CVERecord?id=CVE-2026-32141 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32141 external
https://github.com/WebReflection/flatted/commit/7… external
https://github.com/WebReflection/flatted/pull/88 external
https://github.com/WebReflection/flatted/security… external
https://access.redhat.com/security/cve/CVE-2026-33228 self
https://bugzilla.redhat.com/show_bug.cgi?id=2449872 external
https://www.cve.org/CVERecord?id=CVE-2026-33228 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33228 external
https://github.com/WebReflection/flatted/commit/8… external
https://github.com/WebReflection/flatted/releases… external
https://github.com/WebReflection/flatted/security… external
https://access.redhat.com/security/cve/CVE-2026-33671 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451986 external
https://www.cve.org/CVERecord?id=CVE-2026-33671 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33671 external
https://github.com/micromatch/picomatch/commit/5e… external
https://github.com/micromatch/picomatch/security/… external
https://access.redhat.com/security/cve/CVE-2026-33814 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467815 external
https://www.cve.org/CVERecord?id=CVE-2026-33814 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33814 external
https://go.dev/cl/761581 external
https://go.dev/cl/761640 external
https://go.dev/issue/78476 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4918 external
https://access.redhat.com/security/cve/CVE-2026-33891 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452450 external
https://www.cve.org/CVERecord?id=CVE-2026-33891 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33891 external
https://github.com/digitalbazaar/forge/commit/9bb… external
https://github.com/digitalbazaar/forge/security/a… external
https://access.redhat.com/security/cve/CVE-2026-33894 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452464 external
https://www.cve.org/CVERecord?id=CVE-2026-33894 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33894 external
https://datatracker.ietf.org/doc/html/rfc2313#section-8 external
https://github.com/digitalbazaar/forge/security/a… external
https://mailarchive.ietf.org/arch/msg/openpgp/5rn… external
https://www.rfc-editor.org/rfc/rfc8017.html external
https://access.redhat.com/security/cve/CVE-2026-33895 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452457 external
https://www.cve.org/CVERecord?id=CVE-2026-33895 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33895 external
https://datatracker.ietf.org/doc/html/rfc8032#sec… external
https://github.com/digitalbazaar/forge/commit/bde… external
https://github.com/digitalbazaar/forge/security/a… external
https://access.redhat.com/security/cve/CVE-2026-33896 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452458 external
https://www.cve.org/CVERecord?id=CVE-2026-33896 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33896 external
https://github.com/digitalbazaar/forge/commit/2e4… external
https://github.com/digitalbazaar/forge/security/a… external
https://access.redhat.com/security/cve/CVE-2026-33937 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452523 external
https://www.cve.org/CVERecord?id=CVE-2026-33937 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33937 external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-33938 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452525 external
https://www.cve.org/CVERecord?id=CVE-2026-33938 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33938 external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-33939 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452508 external
https://www.cve.org/CVERecord?id=CVE-2026-33939 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33939 external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-33940 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452521 external
https://www.cve.org/CVERecord?id=CVE-2026-33940 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33940 external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-33941 self
https://bugzilla.redhat.com/show_bug.cgi?id=2452524 external
https://www.cve.org/CVERecord?id=CVE-2026-33941 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33941 external
https://github.com/handlebars-lang/handlebars.js/… external
https://access.redhat.com/security/cve/CVE-2026-39821 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756 external
https://www.cve.org/CVERecord?id=CVE-2026-39821 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821 external
https://go.dev/cl/767220 external
https://go.dev/issue/78760 external
https://pkg.go.dev/vuln/GO-2026-5026 external
https://access.redhat.com/security/cve/CVE-2026-42506 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480759 external
https://www.cve.org/CVERecord?id=CVE-2026-42506 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42506 external
https://go.dev/cl/781700 external
https://go.dev/issue/79571 external
https://pkg.go.dev/vuln/GO-2026-5025 external
https://access.redhat.com/security/cve/CVE-2026-48779 self
https://bugzilla.redhat.com/show_bug.cgi?id=2489661 external
https://www.cve.org/CVERecord?id=CVE-2026-48779 external
https://nvd.nist.gov/vuln/detail/CVE-2026-48779 external
https://github.com/websockets/ws/commit/86d3e8a5f… external
https://github.com/websockets/ws/commit/b5372ac67… external
https://github.com/websockets/ws/commit/bca91adf1… external
https://github.com/websockets/ws/commit/fd36cd864… external
https://github.com/websockets/ws/security/advisor… external
Acknowledgments
jub0bs
To clipboard 

Loading 3.4 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.