Vulnerability-Lookup

RHSA-2026:41064

Vulnerability from csaf_redhat - Published: 2026-07-16 18:54 - Updated: 2026-09-24 17:08

Summary

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update

Severity

Important

Notes

Topic: Red Hat Advanced Cluster Management for Kubernetes 2.11 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.

Details: Red Hat Advanced Cluster Management for Kubernetes 2.11 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which add new features and enhancements, bug fixes, and updated container images. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html-single/release_notes/index#acm-release-notes

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-9288

A vulnerability was found in sha.js, where the hashing implementation does not perform sufficient input type validation. The .update() function accepts arbitrary objects, including those with crafted length properties, which can alter the internal state machine of the hashing process. This flaw may result in unexpected behavior such as rewinding the hash state, producing inconsistent digest outputs, or entering invalid processing loops. The issue was introduced due to the reliance on JavaScript object coercion rules rather than enforcing strict buffer or string inputs.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2fee1170f06bb48ea8e44dd8f55134c53fc06440787722cac5efd4eafd931ba0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:3987a6dc7f58658e99009a96b6efa7ae1de121b3e2b5f96c85b6270ce652e4c8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ca17f3d069b1f706c78c1a9e9d4a5e93c6ef3b3efe06857fd2b0df22fbf698fa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ffae150c4999c220b0d554f6a4308962a64c1b8b40127071d49d5b06024f427e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 160 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:2fbc77c6b49895fa6ca4d1ccea4017178621870d1895a101b599c4d363767cb7_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:5a6dee35195432bb81f4136aa9f1f10b7a8fdb55d2feecec1edd18a5b0beeccc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:6dee87bba9612731e98ac81dccc39996626d83bc1ea8ec37b224d8ccbe74c273_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:efc061c2b9751fa2e4794ddbd9ac9a067b4724c27aea42258b95c894daecc6a8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:0214b8d816592b8d0e5effaf3a97eddbdfd32b4c3056fe52d869134e760a1999_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:2f7afab1d50e4b63467fa53a459da1caca9674d5d10caa5381e73d52d0bba48f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3aae30a486770ede46e8096a217c6726a0c28e7aa9a0c41d01b512159090278a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:edc0de9ec9ce648b3062fed475a01f5ba2c705af7d7f68697702ccff4b01b240_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:9f2e011a88af74a47713534dd66a8af603b09abceffefb78a948675f29593135_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a09f8e102ea566c31f755ac01f616dd2b8decc3e67a54db9559c8a21a06c1cd4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:cf03d8aee9d3cda92ca2f5ead22a72ee4c09b8b86ab48b8c4b13acffda6a74a8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:ff471db4a5b2a195f8f4ba00c4c965d20b7d5a05e00802ec3a3327bdb292147e_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:1131f70e58adc57a1abea1d3ff0c05ba5550b076d85c03c3603da385569c66a4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:b8f73833900bd2ca598dde4820ee987ccdbce79ed40c73dd95541ba85b3391c9_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:c9ead678f4a890bb12e4ee3c86b838cd36cabd6173068b55de831799c53ea6db_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ef181694b56303e79a0ba6048c71bfb7c09fbe016a18c7b35cdbc2d6b96aa54f_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:49c86d311aa7114dde4f5aba376cd4bf8e31befeab636b76e6f72cbc6604631a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:58984d269811dff0f957d1220052dcfd83213da1b20dcc83d5dc8bdc789f31f6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:71b62b8827a7c450c0e2b03e53e02a107c6eb1f46ecd69264bcf9355672b4111_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:f2f4afb3763dcc2b455db4ffa82bb49ea8eadbf6201ca463d59e1092835184ac_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:15f5eba0eee8a4e2b2a85cf91a91c80da6d6afe20ea5f6bb0388e641d2b3948b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:56c682ad9d05710d8607492438bbc40876b71cbe4edfd30ea990f03a8f5b353f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:731f0a59e2ef4dd6ad6dff6667afddbb41e5abe22a9dad158175d038ce522bcc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:ea5476f88f2e0ba0810ee594f5c344023928f65ebd21b7a3f0a16c91ecd73c1c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6d91b1e05908851c158aed4813921fc86cd1609c723fcb057aa1085be86aac56_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6fd6a547a78c88f6c4a7410480ef35f03e855ceec05bb5278072e8b1143429b0_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:a9222c35c84f21f4dec8fed8038ded1999eace29c397b28078163c2e31e481ed_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:ede9a266835cca3544214a4e821dc7f864642dd776a82e9e777507844c7aba51_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:4b6c01d3ccdae6ff1e1d7d320a34f41cc9fff28346709ceb2f17f27b6728409e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:5b0c60eb32e3b3e03fdc0ce84355bf4bc62b7bd2986487373febae1b4b8dc596_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b100b68850f688f5f787f01d5e83ba1db329170da81934fd3d02edd2fe2d23c5_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b2857209a7ae85348dc38c598db9f91144c0b5c440469a3f72f522f11ba5b2d8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:151ee5e5d918d41e3c9bae3b7a084d8efe86680aa90e671abc582fdf1b7b00cf_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:1943dececc507b1f4c3fec5e03af7eac873b03e1ca7b1b745b881b641584d2ed_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:22121c0b2e2ceeb23cc34f07622028af40d22002820c2f05dccd677b0f191a4e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:cd4424baa6f2fe569dec22c7f00697bb66a7528cdae4a7b1b3dc3c94dce64362_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:23c432f51078bf14dcfbcc59e57b312a6d2329f3be38166ce1911916d1f7a969_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:26c38d7ec5d43ea489afedd267317f75b0b40dd67d06dce8e18e86b9c325993c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:803d75cd727a7f3c1d14eef66821c9ccea5b0b50963c4d2b2d414e8167d97feb_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3c67126960c0a29e3aae7732096ef85793cce444302cb8a1834b39ae2ac0c48_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:26b2ba4550df3fcc5e17de05697a0b38175459f342e33767ef8f69a0bd45bd08_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:8a1f8452deab0bbc9efd023bd14b6647d9e3f41e92a9ff9414e06e5b5e2cfcfc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:bdc78c4f327f5b0512d9183a7cd62a763cfd5cfbe667698925dc8bbe00b5e0c3_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cec1455058b2d336bd2094a0b86e60942cd9789330e6f6ef073c61d98b6c3c28_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:0601fa23b8ad812d9a79b67a60c99d91277062eedd2ed075bba01de8048c6166_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:87807801ad4a3bd3db1a77f8c05f561f28efb924c697fbaf6475d43ab458e31c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:c600e53ed1b4106b7c83d07f3f188da20206f7e2524779b38b1ddc07d2c2ed92_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:f37758d2850b9a41fcdb7568aec840a9c40b09972c6270f4d1e8581245d41d21_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:02c2c6ac3af7a2b0a79a440a590682f7da7f4ce93b35d90137d2815a2afae540_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:58b586b52369cc19e87a9390c4f7dc856354b5044613abd4d978518d0fcc00c9_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:5f7d601c7e3c6723284ca45c1f0fa449fad5d003821d52ba74255a522217694c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:fde658736a3a9ed693bb23511bbb65c437cc05200b7c2c5753a62696a192cbbc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:1ef5af3e38dd8f7900e919df56491809d6b681803c415280c11e862b69113201_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:376d579e50da27d0db26913ac48a1b3972a131df0ff11d8759b4735badd8a7ba_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:a7a4b6441cc1d69ffd48bb73b5ceb06b3d68f9e87dfce867176c1841420c7a96_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:d0fac1957a13baf05e4dbc037f2f5e72f48c3c71bc5ccec0334049c1dd1af7e9_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1e4c772f076da4492472b2be30137ab773f2537a52624a70e2540c8dc805814a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:676d2b164e13be3300ac38f2aad2ab1aba08f639ddc2ad1a380897e3a5ee1b1b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:6d0168a646d82d35c43be9004a5c883d6a4db776c526e56b4abc198738dee224_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:8e9452f86eaad67fd02d1c3daa2105200e1616e1542c6599246dc047e7f75565_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8378c837cb9f1c0a2b353ea0cea6eee34faf669ae2e230f13e345265ec5e2cb3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8508c2f0d86f1ada4ad2fd4b810407e7631cd9b396dcad3214dd968095117507_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:91ecc5358c376aeca25c6f7a501916c8dc58a0a19db6c6ff7340592a83d1f991_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:be908904987185ab47fbb5e593a2199ad4e68dffe4385c0d6d91c61a709ae899_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:62631ca0c6283ec935d6c81851fce4407f5d0d458b5b9b558c9ffe625f08b578_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:ae7f02f7b0fd76eacbbbfaca7f7fc7739c36b548dba261d74fdaa2b85a622a88_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:c74542df914d738a039a84f5318cb4d757a1bf0de6a0fb0b28e74605e1fa9181_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e3a75040636446dea8a323f2640c26073dce9010ca3f7f7c723c716241bff9be_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:5dd4c634ae714c3305377442df33fe4fff1297af01c3aa807f5925771b17cd64_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d9800d9c18f6dbcdb2cf8fdc9a28ba9fa1aecc8544627dc5270a0cdbe9e2dd10_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:ebd773529616d37ba067cfb1478b1810cd64e43339bde79a51e78278d1ae1d15_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:eceeeb56c916fc0ce1bd93a577b7e5ee8bd9ab7d784303939a49adcc533e32b5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:38052e66ff6b3748739cd68cd8994d8a6f9b9e89b84ac6409352938366e706c2_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:44452f595c870d56cb53e5c381a8cfdd4fc1daf9523a44e842cac4c11d62cc47_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:58010ff117d9976b09cbc7819f7186c1d5cb54d35598d22ae3ab809c9e081704_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:8769510b5421df6d40ee0a607059ed5f4a0984d14530f5fe5fc6e811f8b8682b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:5ad12ab939ce658325344db69faa0b1ec45612eb421d911b65fa0edaf1266ae0_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:62dc7e7f0441ba4c1d7e63f1161672afe154b58ff9f5524cdb94e63bb285774a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:858e65c115ff3c292fd84a87e475b54834128ab1603b575b69ee7b157a43f1a5_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:fc3f10d65ef14096bf0ea0b754478040b9594eda9381a211f1b738bf3ae243d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:01e83a10a4ff4f1199f36985267acf2538ae4427e9488cf9bc78f65cd6238b72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:46a0e0d90f4c87ddeed80409d7f740299c461adc4be6f9e5e7a03bca6608e94b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:49e50623f745d33abec55e6adc855157b458f93c25fb281ece4bc811f6f8757a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:71f65dbdb3f27819db1eb2b740dd102f67da4e019578721f8e2f7724c8ded21c_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:37b86958a086512b0d52348ae68eccb7f98fcfe94a41df0798727aa8c0b4de24_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:4224dc30fe7ec1d8516eee532f026c1a2be3bf2fb46cebd7d36e1d9b6f81b6e5_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:59d851847b847b78d84e64b267e01ca5e37e143ac1bcbeda2530a31e79b6df85_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:77bc35236a59f570ac83792e445919030f782db18052009b740a0792aa71fd91_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:090ba582cdd6657ea3b4ce3d82787145cd7a767e404952c6c5e9261acc4bb599_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:39d7ad20022d2420d119b9ae28250d84ccef66ef29a4e0dcef93167832d4f626_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:5b79506cee18f2d2a63fc90b9db4c8ada31e2b7f00aa71e680a6bc03c8c7c1f3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:f1d0bc658fce227b07f576519a7f2c0d9a3c2535986eb7b3c897c0cebd3585cc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:044c9d8fb3208169c3c146ac5a506cc21f29c7bd8d49cef5e48fbd394f7eefa2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:17a64e87b0ac73866c8a0e972ce3d81ae7034541359ccc873844ce2906487d8e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:c18447532da7c54369b41e231dafb245579cb45a3cd304add9ddfe50ba824449_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:d45323c9ed6fd5c1c0288b65d7e465d6393dd7a25aa05f89d8c22763272bbb10_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:4daa39252a38ccf12fc9ab3ac0fdd499be59822d712b667ba52b5f3979d214fa_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:74308e370b54f494fb5dc23a884b04120c8059900dbf6a1ef457c3d742a8a4e6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:d4cdc2bf2711a6d381313d8d83f37d44349fdde90ddb5eaca2ece50ea0a4cb21_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:de9211cd54388b1672099cf545833b51467a2d22803e144e0109ec078db47962_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2774d35ec19f2f908d9542f95fb321f6dcdeca90ad14653c1c4e5e3aadf38853_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:5aa5b5ff189eb467cbb6a0787cdebf8f6458feb9d29d8ade21e30b2f830ed6af_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:998fd280bc7802128a3d66b2fafbaef0c2722f202c677816a46f99d23deac67c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:dffc7bc40641f1c6c69d33c4c5763b82121553852ef699ca7630b4927be08a83_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:2a9120360f7e521031cedaa4365bf9f54c095008494dcb988b096e61c22a40d1_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:c99473732aab64b637d31ddc101bdece73f45ab1bcf7acc9b3abaf801370ea5f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:fdb481dca399854fc90c028814db5a22a61bb35526e772743f7b7b1552adca96_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:feb78be12e6658441ff35595b04c0f79f036f1f9f6fc19eccec31ed07d9001c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:4350b1467a9e6554059413bce5125dcb24c43dede6b8c580804ba91105d7e905_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:5e1e59193f13ff643aa177058abe62b4eb004a03875e3f4f2f271dab2cb4b988_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9670a3fbe6140fa5c9202b59102c3abe6325908641d722ad019d2b521a9ec2dc_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:ea06c012619e1376714c96e03222cc874eb544c906a3e71e66cf5dcf6a1cc117_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:194c43ad19e85f56cfcf365c649a3e429d623b65baf7915cf22660e197067389_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:6a8052e15b64a5bb8a50a2e42a5bb4fc14710e30adee55d9667e21db97df1013_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f136465014e9d937540105f8392f423e97e7f50bf66fe38cfe46cbb56109b20b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f46e3daf7df970340a5c049771d818d9ddd401fca3022e636659fb9ce9d9a016_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:9cd6aa4931b077c33376c29a0803d2d8acdc9f366b53072929aaf2dc6bed8a8e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:c56237aa6129912c38a107b967b4310bf82ab1b527ba033a8d1b74fc5ce56821_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efc98e8d7e443e4bf91e19f4216b54e3d55191fcc8fe234b06a8f8d70ccde412_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efdde537fb229e8e1d5590fc00905f23d165a7ec22586eddd3a0f9b45d6e0d6c_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:2b585bb9eec9da088a345cff9f6344c4f039c3573af2de0e9a10cbe3586e8e10_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:6a0e334dff8b2d68bc6b9146e13e3c4f14da7d2701f16f664edb17d953441345_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:c69ab0279af4125ca9795fe7167dd6e0d9e101596828bd27d14514a0996ef5b2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:da63c87f74d7edfbfb5f382630032df8a7cc56b7c872e451ff80bf05f43d7c4b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:163e9463b7925caccb1b8cfdfd3c45c73aca7e1f6575ebbbc9e4a07ecb5d85aa_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:3cf4eccfd0b8006b3792aef8220c645687d1b7e2190017e85dc70cec017167de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:536bbfac8ad1c9e7f095ad5c7622e9c69182f4bd8bad143a331605143a185d3d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:a595d01b330efc0b2e4881493ac1ec962571e7fb8dad51aeb2e0ea1fecb5a7a3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:36d7a7edebcb8855295b32e93b1d4f71a2744c2ed5bae52aa6975afc348b5c85_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:552f9f09b3d45a3bfe427e2a5dd64f6b0ad8f5027a1cd2f5107c68f99eaba441_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:ae823106789a7fb6653329640d556662a44179cd5510ce06ef189bc3a4583bab_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:cf4c703fae9d841cfdb9cca9b110ff6eaaf9dfd764306174bdc648a4d10a5f96_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:082a8add79dae680e605046c16eeed34f9b66afd2152736745756c31ba746a23_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:9443de3ef2165a44647fa2be174d308cbca794211ecd8bb04576aa6912827aba_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:a0554318e3e2d27c9fea0c9199143216a797ff04566da706227ecd50af26fc37_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:d82df0b30a79b46c0976f5d20920033573bb9634c44d7eeeb5b28a8bfcbff9f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:19098881765bacfa186f64d3da35d10e1102ffe5d6c07685c321f67ff3acf981_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:47c2632a4e1d7feac3dbfa1542e5e1f18b8e96a7106e256b6cdad393c43387a2_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:7b5ae76cc31348a34844ee2b2f4a0659f875ecf775b4b7792aa6943f379f575b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:c1425b33959e968c6600e0e4eec9b49493d793b6b03e2d8964a77f0b97b09adc_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:a181f3b068b285ff1333443afd093a2d6178b4591532a1cfa64f02117349b2e1_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:ca9e460d024b1f0c9e6226816de196736bc4a303a6cdd1974521843d1345f1a3_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:d8774c84f8b36f1bcc1519c3a3b830b7bcabcafe6fc7fb095fd29def9e3f7f49_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:f1e6ae2100aef34b27b56c585bc2d5c4b76eb4bb292beba9377a391c8118ff00_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:333ee37c4b31b3454e63bf2c2e29e15c0181c724d36789d7964834f84b8152c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:40b2a29a458fa93f6eef49329065303479df95eaeafb2a459640df634a72467d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:86b9815fe822bd4fd96fcb37ee47e16c0be81894237228b4712364200d7e0aaa_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:cce0932612562d839104acc908e05957b3e4181073a1311cabb454e9969b34b8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:5b83bdd7cb6ec7187b2a6daf78231e23e812223a7ccf5d1d63e8ebcd90a2b588_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:bd9c2a206592563558d641ab8ed64082ed93d490fe831a4a9986e640850a9664_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:cae2217e1de8dc4580fe5efec2349c04df85f2e81c093e6dd4a5c95edca3a937_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:db68a44207202d5ae8ce90708a0f6f5363982c77fa15387ce6056a0950e52c97_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:0588ace10b22bc73e4d164c124b7930f0f761ad90f070394a908c6d10dc73b91_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:82c267fb17f79da96ad6f9852023fc746604ea55c5dd8b82dae2fe42c7d24966_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:8f63d9413d0a7baca229804c1b49df332363d581d6cfb20f6282a420bba82181_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:f6dc22ed5efadff616cfb356a46073cc6e0c9754e998af1b873e29c322a4dc7b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:01ac5e8fb78f021214a42155e12b3a62466c3dfc921218a5f268073f9cbdd8a4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:134d64302e7377368ad48cac526031930861d603c0ecbd7c6f53a25e9d62affb_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:24bfccb828e87258cf4f5b919a94669d513898eb37a57d738a3ad52686d6a7b4_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:eb2fba1996861e9dd2a7777e15fe88a3d691eb46a51c6f5a2db6b24f2714313c_ppc64le	—	Workaround

Threats

Impact Important

CVE-2025-13465

A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:1ef5af3e38dd8f7900e919df56491809d6b681803c415280c11e862b69113201_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:376d579e50da27d0db26913ac48a1b3972a131df0ff11d8759b4735badd8a7ba_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:a7a4b6441cc1d69ffd48bb73b5ceb06b3d68f9e87dfce867176c1841420c7a96_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:d0fac1957a13baf05e4dbc037f2f5e72f48c3c71bc5ccec0334049c1dd1af7e9_s390x	—	Vendor Fix fix Workaround

Known not affected 160 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:2fbc77c6b49895fa6ca4d1ccea4017178621870d1895a101b599c4d363767cb7_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:5a6dee35195432bb81f4136aa9f1f10b7a8fdb55d2feecec1edd18a5b0beeccc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:6dee87bba9612731e98ac81dccc39996626d83bc1ea8ec37b224d8ccbe74c273_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:efc061c2b9751fa2e4794ddbd9ac9a067b4724c27aea42258b95c894daecc6a8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:0214b8d816592b8d0e5effaf3a97eddbdfd32b4c3056fe52d869134e760a1999_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:2f7afab1d50e4b63467fa53a459da1caca9674d5d10caa5381e73d52d0bba48f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3aae30a486770ede46e8096a217c6726a0c28e7aa9a0c41d01b512159090278a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:edc0de9ec9ce648b3062fed475a01f5ba2c705af7d7f68697702ccff4b01b240_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:9f2e011a88af74a47713534dd66a8af603b09abceffefb78a948675f29593135_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a09f8e102ea566c31f755ac01f616dd2b8decc3e67a54db9559c8a21a06c1cd4_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:cf03d8aee9d3cda92ca2f5ead22a72ee4c09b8b86ab48b8c4b13acffda6a74a8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:ff471db4a5b2a195f8f4ba00c4c965d20b7d5a05e00802ec3a3327bdb292147e_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2fee1170f06bb48ea8e44dd8f55134c53fc06440787722cac5efd4eafd931ba0_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:3987a6dc7f58658e99009a96b6efa7ae1de121b3e2b5f96c85b6270ce652e4c8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ca17f3d069b1f706c78c1a9e9d4a5e93c6ef3b3efe06857fd2b0df22fbf698fa_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ffae150c4999c220b0d554f6a4308962a64c1b8b40127071d49d5b06024f427e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:1131f70e58adc57a1abea1d3ff0c05ba5550b076d85c03c3603da385569c66a4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:b8f73833900bd2ca598dde4820ee987ccdbce79ed40c73dd95541ba85b3391c9_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:c9ead678f4a890bb12e4ee3c86b838cd36cabd6173068b55de831799c53ea6db_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ef181694b56303e79a0ba6048c71bfb7c09fbe016a18c7b35cdbc2d6b96aa54f_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:49c86d311aa7114dde4f5aba376cd4bf8e31befeab636b76e6f72cbc6604631a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:58984d269811dff0f957d1220052dcfd83213da1b20dcc83d5dc8bdc789f31f6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:71b62b8827a7c450c0e2b03e53e02a107c6eb1f46ecd69264bcf9355672b4111_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:f2f4afb3763dcc2b455db4ffa82bb49ea8eadbf6201ca463d59e1092835184ac_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:15f5eba0eee8a4e2b2a85cf91a91c80da6d6afe20ea5f6bb0388e641d2b3948b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:56c682ad9d05710d8607492438bbc40876b71cbe4edfd30ea990f03a8f5b353f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:731f0a59e2ef4dd6ad6dff6667afddbb41e5abe22a9dad158175d038ce522bcc_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:ea5476f88f2e0ba0810ee594f5c344023928f65ebd21b7a3f0a16c91ecd73c1c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6d91b1e05908851c158aed4813921fc86cd1609c723fcb057aa1085be86aac56_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6fd6a547a78c88f6c4a7410480ef35f03e855ceec05bb5278072e8b1143429b0_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:a9222c35c84f21f4dec8fed8038ded1999eace29c397b28078163c2e31e481ed_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:ede9a266835cca3544214a4e821dc7f864642dd776a82e9e777507844c7aba51_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:4b6c01d3ccdae6ff1e1d7d320a34f41cc9fff28346709ceb2f17f27b6728409e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:5b0c60eb32e3b3e03fdc0ce84355bf4bc62b7bd2986487373febae1b4b8dc596_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b100b68850f688f5f787f01d5e83ba1db329170da81934fd3d02edd2fe2d23c5_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b2857209a7ae85348dc38c598db9f91144c0b5c440469a3f72f522f11ba5b2d8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:151ee5e5d918d41e3c9bae3b7a084d8efe86680aa90e671abc582fdf1b7b00cf_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:1943dececc507b1f4c3fec5e03af7eac873b03e1ca7b1b745b881b641584d2ed_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:22121c0b2e2ceeb23cc34f07622028af40d22002820c2f05dccd677b0f191a4e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:cd4424baa6f2fe569dec22c7f00697bb66a7528cdae4a7b1b3dc3c94dce64362_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:23c432f51078bf14dcfbcc59e57b312a6d2329f3be38166ce1911916d1f7a969_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:26c38d7ec5d43ea489afedd267317f75b0b40dd67d06dce8e18e86b9c325993c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:803d75cd727a7f3c1d14eef66821c9ccea5b0b50963c4d2b2d414e8167d97feb_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3c67126960c0a29e3aae7732096ef85793cce444302cb8a1834b39ae2ac0c48_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:26b2ba4550df3fcc5e17de05697a0b38175459f342e33767ef8f69a0bd45bd08_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:8a1f8452deab0bbc9efd023bd14b6647d9e3f41e92a9ff9414e06e5b5e2cfcfc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:bdc78c4f327f5b0512d9183a7cd62a763cfd5cfbe667698925dc8bbe00b5e0c3_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cec1455058b2d336bd2094a0b86e60942cd9789330e6f6ef073c61d98b6c3c28_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:0601fa23b8ad812d9a79b67a60c99d91277062eedd2ed075bba01de8048c6166_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:87807801ad4a3bd3db1a77f8c05f561f28efb924c697fbaf6475d43ab458e31c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:c600e53ed1b4106b7c83d07f3f188da20206f7e2524779b38b1ddc07d2c2ed92_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:f37758d2850b9a41fcdb7568aec840a9c40b09972c6270f4d1e8581245d41d21_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:02c2c6ac3af7a2b0a79a440a590682f7da7f4ce93b35d90137d2815a2afae540_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:58b586b52369cc19e87a9390c4f7dc856354b5044613abd4d978518d0fcc00c9_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:5f7d601c7e3c6723284ca45c1f0fa449fad5d003821d52ba74255a522217694c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:fde658736a3a9ed693bb23511bbb65c437cc05200b7c2c5753a62696a192cbbc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1e4c772f076da4492472b2be30137ab773f2537a52624a70e2540c8dc805814a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:676d2b164e13be3300ac38f2aad2ab1aba08f639ddc2ad1a380897e3a5ee1b1b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:6d0168a646d82d35c43be9004a5c883d6a4db776c526e56b4abc198738dee224_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:8e9452f86eaad67fd02d1c3daa2105200e1616e1542c6599246dc047e7f75565_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8378c837cb9f1c0a2b353ea0cea6eee34faf669ae2e230f13e345265ec5e2cb3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8508c2f0d86f1ada4ad2fd4b810407e7631cd9b396dcad3214dd968095117507_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:91ecc5358c376aeca25c6f7a501916c8dc58a0a19db6c6ff7340592a83d1f991_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:be908904987185ab47fbb5e593a2199ad4e68dffe4385c0d6d91c61a709ae899_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:62631ca0c6283ec935d6c81851fce4407f5d0d458b5b9b558c9ffe625f08b578_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:ae7f02f7b0fd76eacbbbfaca7f7fc7739c36b548dba261d74fdaa2b85a622a88_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:c74542df914d738a039a84f5318cb4d757a1bf0de6a0fb0b28e74605e1fa9181_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e3a75040636446dea8a323f2640c26073dce9010ca3f7f7c723c716241bff9be_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:5dd4c634ae714c3305377442df33fe4fff1297af01c3aa807f5925771b17cd64_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d9800d9c18f6dbcdb2cf8fdc9a28ba9fa1aecc8544627dc5270a0cdbe9e2dd10_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:ebd773529616d37ba067cfb1478b1810cd64e43339bde79a51e78278d1ae1d15_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:eceeeb56c916fc0ce1bd93a577b7e5ee8bd9ab7d784303939a49adcc533e32b5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:38052e66ff6b3748739cd68cd8994d8a6f9b9e89b84ac6409352938366e706c2_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:44452f595c870d56cb53e5c381a8cfdd4fc1daf9523a44e842cac4c11d62cc47_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:58010ff117d9976b09cbc7819f7186c1d5cb54d35598d22ae3ab809c9e081704_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:8769510b5421df6d40ee0a607059ed5f4a0984d14530f5fe5fc6e811f8b8682b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:5ad12ab939ce658325344db69faa0b1ec45612eb421d911b65fa0edaf1266ae0_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:62dc7e7f0441ba4c1d7e63f1161672afe154b58ff9f5524cdb94e63bb285774a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:858e65c115ff3c292fd84a87e475b54834128ab1603b575b69ee7b157a43f1a5_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:fc3f10d65ef14096bf0ea0b754478040b9594eda9381a211f1b738bf3ae243d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:01e83a10a4ff4f1199f36985267acf2538ae4427e9488cf9bc78f65cd6238b72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:46a0e0d90f4c87ddeed80409d7f740299c461adc4be6f9e5e7a03bca6608e94b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:49e50623f745d33abec55e6adc855157b458f93c25fb281ece4bc811f6f8757a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:71f65dbdb3f27819db1eb2b740dd102f67da4e019578721f8e2f7724c8ded21c_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:37b86958a086512b0d52348ae68eccb7f98fcfe94a41df0798727aa8c0b4de24_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:4224dc30fe7ec1d8516eee532f026c1a2be3bf2fb46cebd7d36e1d9b6f81b6e5_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:59d851847b847b78d84e64b267e01ca5e37e143ac1bcbeda2530a31e79b6df85_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:77bc35236a59f570ac83792e445919030f782db18052009b740a0792aa71fd91_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:090ba582cdd6657ea3b4ce3d82787145cd7a767e404952c6c5e9261acc4bb599_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:39d7ad20022d2420d119b9ae28250d84ccef66ef29a4e0dcef93167832d4f626_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:5b79506cee18f2d2a63fc90b9db4c8ada31e2b7f00aa71e680a6bc03c8c7c1f3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:f1d0bc658fce227b07f576519a7f2c0d9a3c2535986eb7b3c897c0cebd3585cc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:044c9d8fb3208169c3c146ac5a506cc21f29c7bd8d49cef5e48fbd394f7eefa2_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:17a64e87b0ac73866c8a0e972ce3d81ae7034541359ccc873844ce2906487d8e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:c18447532da7c54369b41e231dafb245579cb45a3cd304add9ddfe50ba824449_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:d45323c9ed6fd5c1c0288b65d7e465d6393dd7a25aa05f89d8c22763272bbb10_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:4daa39252a38ccf12fc9ab3ac0fdd499be59822d712b667ba52b5f3979d214fa_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:74308e370b54f494fb5dc23a884b04120c8059900dbf6a1ef457c3d742a8a4e6_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:d4cdc2bf2711a6d381313d8d83f37d44349fdde90ddb5eaca2ece50ea0a4cb21_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:de9211cd54388b1672099cf545833b51467a2d22803e144e0109ec078db47962_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2774d35ec19f2f908d9542f95fb321f6dcdeca90ad14653c1c4e5e3aadf38853_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:5aa5b5ff189eb467cbb6a0787cdebf8f6458feb9d29d8ade21e30b2f830ed6af_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:998fd280bc7802128a3d66b2fafbaef0c2722f202c677816a46f99d23deac67c_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:dffc7bc40641f1c6c69d33c4c5763b82121553852ef699ca7630b4927be08a83_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:2a9120360f7e521031cedaa4365bf9f54c095008494dcb988b096e61c22a40d1_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:c99473732aab64b637d31ddc101bdece73f45ab1bcf7acc9b3abaf801370ea5f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:fdb481dca399854fc90c028814db5a22a61bb35526e772743f7b7b1552adca96_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:feb78be12e6658441ff35595b04c0f79f036f1f9f6fc19eccec31ed07d9001c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:4350b1467a9e6554059413bce5125dcb24c43dede6b8c580804ba91105d7e905_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:5e1e59193f13ff643aa177058abe62b4eb004a03875e3f4f2f271dab2cb4b988_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9670a3fbe6140fa5c9202b59102c3abe6325908641d722ad019d2b521a9ec2dc_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:ea06c012619e1376714c96e03222cc874eb544c906a3e71e66cf5dcf6a1cc117_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:194c43ad19e85f56cfcf365c649a3e429d623b65baf7915cf22660e197067389_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:6a8052e15b64a5bb8a50a2e42a5bb4fc14710e30adee55d9667e21db97df1013_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f136465014e9d937540105f8392f423e97e7f50bf66fe38cfe46cbb56109b20b_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f46e3daf7df970340a5c049771d818d9ddd401fca3022e636659fb9ce9d9a016_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:9cd6aa4931b077c33376c29a0803d2d8acdc9f366b53072929aaf2dc6bed8a8e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:c56237aa6129912c38a107b967b4310bf82ab1b527ba033a8d1b74fc5ce56821_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efc98e8d7e443e4bf91e19f4216b54e3d55191fcc8fe234b06a8f8d70ccde412_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efdde537fb229e8e1d5590fc00905f23d165a7ec22586eddd3a0f9b45d6e0d6c_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:2b585bb9eec9da088a345cff9f6344c4f039c3573af2de0e9a10cbe3586e8e10_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:6a0e334dff8b2d68bc6b9146e13e3c4f14da7d2701f16f664edb17d953441345_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:c69ab0279af4125ca9795fe7167dd6e0d9e101596828bd27d14514a0996ef5b2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:da63c87f74d7edfbfb5f382630032df8a7cc56b7c872e451ff80bf05f43d7c4b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:163e9463b7925caccb1b8cfdfd3c45c73aca7e1f6575ebbbc9e4a07ecb5d85aa_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:3cf4eccfd0b8006b3792aef8220c645687d1b7e2190017e85dc70cec017167de_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:536bbfac8ad1c9e7f095ad5c7622e9c69182f4bd8bad143a331605143a185d3d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:a595d01b330efc0b2e4881493ac1ec962571e7fb8dad51aeb2e0ea1fecb5a7a3_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:36d7a7edebcb8855295b32e93b1d4f71a2744c2ed5bae52aa6975afc348b5c85_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:552f9f09b3d45a3bfe427e2a5dd64f6b0ad8f5027a1cd2f5107c68f99eaba441_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:ae823106789a7fb6653329640d556662a44179cd5510ce06ef189bc3a4583bab_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:cf4c703fae9d841cfdb9cca9b110ff6eaaf9dfd764306174bdc648a4d10a5f96_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:082a8add79dae680e605046c16eeed34f9b66afd2152736745756c31ba746a23_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:9443de3ef2165a44647fa2be174d308cbca794211ecd8bb04576aa6912827aba_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:a0554318e3e2d27c9fea0c9199143216a797ff04566da706227ecd50af26fc37_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:d82df0b30a79b46c0976f5d20920033573bb9634c44d7eeeb5b28a8bfcbff9f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:19098881765bacfa186f64d3da35d10e1102ffe5d6c07685c321f67ff3acf981_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:47c2632a4e1d7feac3dbfa1542e5e1f18b8e96a7106e256b6cdad393c43387a2_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:7b5ae76cc31348a34844ee2b2f4a0659f875ecf775b4b7792aa6943f379f575b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:c1425b33959e968c6600e0e4eec9b49493d793b6b03e2d8964a77f0b97b09adc_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:a181f3b068b285ff1333443afd093a2d6178b4591532a1cfa64f02117349b2e1_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:ca9e460d024b1f0c9e6226816de196736bc4a303a6cdd1974521843d1345f1a3_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:d8774c84f8b36f1bcc1519c3a3b830b7bcabcafe6fc7fb095fd29def9e3f7f49_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:f1e6ae2100aef34b27b56c585bc2d5c4b76eb4bb292beba9377a391c8118ff00_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:333ee37c4b31b3454e63bf2c2e29e15c0181c724d36789d7964834f84b8152c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:40b2a29a458fa93f6eef49329065303479df95eaeafb2a459640df634a72467d_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:86b9815fe822bd4fd96fcb37ee47e16c0be81894237228b4712364200d7e0aaa_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:cce0932612562d839104acc908e05957b3e4181073a1311cabb454e9969b34b8_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:5b83bdd7cb6ec7187b2a6daf78231e23e812223a7ccf5d1d63e8ebcd90a2b588_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:bd9c2a206592563558d641ab8ed64082ed93d490fe831a4a9986e640850a9664_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:cae2217e1de8dc4580fe5efec2349c04df85f2e81c093e6dd4a5c95edca3a937_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:db68a44207202d5ae8ce90708a0f6f5363982c77fa15387ce6056a0950e52c97_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:0588ace10b22bc73e4d164c124b7930f0f761ad90f070394a908c6d10dc73b91_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:82c267fb17f79da96ad6f9852023fc746604ea55c5dd8b82dae2fe42c7d24966_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:8f63d9413d0a7baca229804c1b49df332363d581d6cfb20f6282a420bba82181_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:f6dc22ed5efadff616cfb356a46073cc6e0c9754e998af1b873e29c322a4dc7b_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:01ac5e8fb78f021214a42155e12b3a62466c3dfc921218a5f268073f9cbdd8a4_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:134d64302e7377368ad48cac526031930861d603c0ecbd7c6f53a25e9d62affb_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:24bfccb828e87258cf4f5b919a94669d513898eb37a57d738a3ad52686d6a7b4_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:eb2fba1996861e9dd2a7777e15fe88a3d691eb46a51c6f5a2db6b24f2714313c_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-21721

An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2025-9288

Known not affected 160 products, the same list as for CVE-2025-9288

Threats

Impact Important

CVE-2026-22029

A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.

8.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-25639

A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-42508

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:194c43ad19e85f56cfcf365c649a3e429d623b65baf7915cf22660e197067389_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:6a8052e15b64a5bb8a50a2e42a5bb4fc14710e30adee55d9667e21db97df1013_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f136465014e9d937540105f8392f423e97e7f50bf66fe38cfe46cbb56109b20b_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f46e3daf7df970340a5c049771d818d9ddd401fca3022e636659fb9ce9d9a016_amd64	—	Vendor Fix fix

Known not affected 160 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:2fbc77c6b49895fa6ca4d1ccea4017178621870d1895a101b599c4d363767cb7_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:5a6dee35195432bb81f4136aa9f1f10b7a8fdb55d2feecec1edd18a5b0beeccc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:6dee87bba9612731e98ac81dccc39996626d83bc1ea8ec37b224d8ccbe74c273_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:efc061c2b9751fa2e4794ddbd9ac9a067b4724c27aea42258b95c894daecc6a8_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:0214b8d816592b8d0e5effaf3a97eddbdfd32b4c3056fe52d869134e760a1999_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:2f7afab1d50e4b63467fa53a459da1caca9674d5d10caa5381e73d52d0bba48f_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3aae30a486770ede46e8096a217c6726a0c28e7aa9a0c41d01b512159090278a_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:edc0de9ec9ce648b3062fed475a01f5ba2c705af7d7f68697702ccff4b01b240_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:9f2e011a88af74a47713534dd66a8af603b09abceffefb78a948675f29593135_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a09f8e102ea566c31f755ac01f616dd2b8decc3e67a54db9559c8a21a06c1cd4_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:cf03d8aee9d3cda92ca2f5ead22a72ee4c09b8b86ab48b8c4b13acffda6a74a8_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:ff471db4a5b2a195f8f4ba00c4c965d20b7d5a05e00802ec3a3327bdb292147e_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2fee1170f06bb48ea8e44dd8f55134c53fc06440787722cac5efd4eafd931ba0_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:3987a6dc7f58658e99009a96b6efa7ae1de121b3e2b5f96c85b6270ce652e4c8_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ca17f3d069b1f706c78c1a9e9d4a5e93c6ef3b3efe06857fd2b0df22fbf698fa_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:ffae150c4999c220b0d554f6a4308962a64c1b8b40127071d49d5b06024f427e_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:1131f70e58adc57a1abea1d3ff0c05ba5550b076d85c03c3603da385569c66a4_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:b8f73833900bd2ca598dde4820ee987ccdbce79ed40c73dd95541ba85b3391c9_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:c9ead678f4a890bb12e4ee3c86b838cd36cabd6173068b55de831799c53ea6db_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ef181694b56303e79a0ba6048c71bfb7c09fbe016a18c7b35cdbc2d6b96aa54f_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:49c86d311aa7114dde4f5aba376cd4bf8e31befeab636b76e6f72cbc6604631a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:58984d269811dff0f957d1220052dcfd83213da1b20dcc83d5dc8bdc789f31f6_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:71b62b8827a7c450c0e2b03e53e02a107c6eb1f46ecd69264bcf9355672b4111_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:f2f4afb3763dcc2b455db4ffa82bb49ea8eadbf6201ca463d59e1092835184ac_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:15f5eba0eee8a4e2b2a85cf91a91c80da6d6afe20ea5f6bb0388e641d2b3948b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:56c682ad9d05710d8607492438bbc40876b71cbe4edfd30ea990f03a8f5b353f_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:731f0a59e2ef4dd6ad6dff6667afddbb41e5abe22a9dad158175d038ce522bcc_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:ea5476f88f2e0ba0810ee594f5c344023928f65ebd21b7a3f0a16c91ecd73c1c_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6d91b1e05908851c158aed4813921fc86cd1609c723fcb057aa1085be86aac56_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:6fd6a547a78c88f6c4a7410480ef35f03e855ceec05bb5278072e8b1143429b0_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:a9222c35c84f21f4dec8fed8038ded1999eace29c397b28078163c2e31e481ed_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:ede9a266835cca3544214a4e821dc7f864642dd776a82e9e777507844c7aba51_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:4b6c01d3ccdae6ff1e1d7d320a34f41cc9fff28346709ceb2f17f27b6728409e_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:5b0c60eb32e3b3e03fdc0ce84355bf4bc62b7bd2986487373febae1b4b8dc596_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b100b68850f688f5f787f01d5e83ba1db329170da81934fd3d02edd2fe2d23c5_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:b2857209a7ae85348dc38c598db9f91144c0b5c440469a3f72f522f11ba5b2d8_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:151ee5e5d918d41e3c9bae3b7a084d8efe86680aa90e671abc582fdf1b7b00cf_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:1943dececc507b1f4c3fec5e03af7eac873b03e1ca7b1b745b881b641584d2ed_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:22121c0b2e2ceeb23cc34f07622028af40d22002820c2f05dccd677b0f191a4e_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:cd4424baa6f2fe569dec22c7f00697bb66a7528cdae4a7b1b3dc3c94dce64362_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:23c432f51078bf14dcfbcc59e57b312a6d2329f3be38166ce1911916d1f7a969_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:26c38d7ec5d43ea489afedd267317f75b0b40dd67d06dce8e18e86b9c325993c_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:803d75cd727a7f3c1d14eef66821c9ccea5b0b50963c4d2b2d414e8167d97feb_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3c67126960c0a29e3aae7732096ef85793cce444302cb8a1834b39ae2ac0c48_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:26b2ba4550df3fcc5e17de05697a0b38175459f342e33767ef8f69a0bd45bd08_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:8a1f8452deab0bbc9efd023bd14b6647d9e3f41e92a9ff9414e06e5b5e2cfcfc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:bdc78c4f327f5b0512d9183a7cd62a763cfd5cfbe667698925dc8bbe00b5e0c3_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cec1455058b2d336bd2094a0b86e60942cd9789330e6f6ef073c61d98b6c3c28_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:0601fa23b8ad812d9a79b67a60c99d91277062eedd2ed075bba01de8048c6166_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:87807801ad4a3bd3db1a77f8c05f561f28efb924c697fbaf6475d43ab458e31c_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:c600e53ed1b4106b7c83d07f3f188da20206f7e2524779b38b1ddc07d2c2ed92_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:f37758d2850b9a41fcdb7568aec840a9c40b09972c6270f4d1e8581245d41d21_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:02c2c6ac3af7a2b0a79a440a590682f7da7f4ce93b35d90137d2815a2afae540_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:58b586b52369cc19e87a9390c4f7dc856354b5044613abd4d978518d0fcc00c9_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:5f7d601c7e3c6723284ca45c1f0fa449fad5d003821d52ba74255a522217694c_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:fde658736a3a9ed693bb23511bbb65c437cc05200b7c2c5753a62696a192cbbc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:1ef5af3e38dd8f7900e919df56491809d6b681803c415280c11e862b69113201_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:376d579e50da27d0db26913ac48a1b3972a131df0ff11d8759b4735badd8a7ba_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:a7a4b6441cc1d69ffd48bb73b5ceb06b3d68f9e87dfce867176c1841420c7a96_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/console-rhel9@sha256:d0fac1957a13baf05e4dbc037f2f5e72f48c3c71bc5ccec0334049c1dd1af7e9_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1e4c772f076da4492472b2be30137ab773f2537a52624a70e2540c8dc805814a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:676d2b164e13be3300ac38f2aad2ab1aba08f639ddc2ad1a380897e3a5ee1b1b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:6d0168a646d82d35c43be9004a5c883d6a4db776c526e56b4abc198738dee224_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:8e9452f86eaad67fd02d1c3daa2105200e1616e1542c6599246dc047e7f75565_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8378c837cb9f1c0a2b353ea0cea6eee34faf669ae2e230f13e345265ec5e2cb3_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:8508c2f0d86f1ada4ad2fd4b810407e7631cd9b396dcad3214dd968095117507_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:91ecc5358c376aeca25c6f7a501916c8dc58a0a19db6c6ff7340592a83d1f991_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:be908904987185ab47fbb5e593a2199ad4e68dffe4385c0d6d91c61a709ae899_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:62631ca0c6283ec935d6c81851fce4407f5d0d458b5b9b558c9ffe625f08b578_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:ae7f02f7b0fd76eacbbbfaca7f7fc7739c36b548dba261d74fdaa2b85a622a88_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:c74542df914d738a039a84f5318cb4d757a1bf0de6a0fb0b28e74605e1fa9181_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e3a75040636446dea8a323f2640c26073dce9010ca3f7f7c723c716241bff9be_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:5dd4c634ae714c3305377442df33fe4fff1297af01c3aa807f5925771b17cd64_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d9800d9c18f6dbcdb2cf8fdc9a28ba9fa1aecc8544627dc5270a0cdbe9e2dd10_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:ebd773529616d37ba067cfb1478b1810cd64e43339bde79a51e78278d1ae1d15_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:eceeeb56c916fc0ce1bd93a577b7e5ee8bd9ab7d784303939a49adcc533e32b5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:38052e66ff6b3748739cd68cd8994d8a6f9b9e89b84ac6409352938366e706c2_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:44452f595c870d56cb53e5c381a8cfdd4fc1daf9523a44e842cac4c11d62cc47_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:58010ff117d9976b09cbc7819f7186c1d5cb54d35598d22ae3ab809c9e081704_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:8769510b5421df6d40ee0a607059ed5f4a0984d14530f5fe5fc6e811f8b8682b_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:5ad12ab939ce658325344db69faa0b1ec45612eb421d911b65fa0edaf1266ae0_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:62dc7e7f0441ba4c1d7e63f1161672afe154b58ff9f5524cdb94e63bb285774a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:858e65c115ff3c292fd84a87e475b54834128ab1603b575b69ee7b157a43f1a5_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:fc3f10d65ef14096bf0ea0b754478040b9594eda9381a211f1b738bf3ae243d8_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:01e83a10a4ff4f1199f36985267acf2538ae4427e9488cf9bc78f65cd6238b72_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:46a0e0d90f4c87ddeed80409d7f740299c461adc4be6f9e5e7a03bca6608e94b_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:49e50623f745d33abec55e6adc855157b458f93c25fb281ece4bc811f6f8757a_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:71f65dbdb3f27819db1eb2b740dd102f67da4e019578721f8e2f7724c8ded21c_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:37b86958a086512b0d52348ae68eccb7f98fcfe94a41df0798727aa8c0b4de24_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:4224dc30fe7ec1d8516eee532f026c1a2be3bf2fb46cebd7d36e1d9b6f81b6e5_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:59d851847b847b78d84e64b267e01ca5e37e143ac1bcbeda2530a31e79b6df85_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:77bc35236a59f570ac83792e445919030f782db18052009b740a0792aa71fd91_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:090ba582cdd6657ea3b4ce3d82787145cd7a767e404952c6c5e9261acc4bb599_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:39d7ad20022d2420d119b9ae28250d84ccef66ef29a4e0dcef93167832d4f626_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:5b79506cee18f2d2a63fc90b9db4c8ada31e2b7f00aa71e680a6bc03c8c7c1f3_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:f1d0bc658fce227b07f576519a7f2c0d9a3c2535986eb7b3c897c0cebd3585cc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:044c9d8fb3208169c3c146ac5a506cc21f29c7bd8d49cef5e48fbd394f7eefa2_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:17a64e87b0ac73866c8a0e972ce3d81ae7034541359ccc873844ce2906487d8e_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:c18447532da7c54369b41e231dafb245579cb45a3cd304add9ddfe50ba824449_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:d45323c9ed6fd5c1c0288b65d7e465d6393dd7a25aa05f89d8c22763272bbb10_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:4daa39252a38ccf12fc9ab3ac0fdd499be59822d712b667ba52b5f3979d214fa_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:74308e370b54f494fb5dc23a884b04120c8059900dbf6a1ef457c3d742a8a4e6_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:d4cdc2bf2711a6d381313d8d83f37d44349fdde90ddb5eaca2ece50ea0a4cb21_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:de9211cd54388b1672099cf545833b51467a2d22803e144e0109ec078db47962_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2774d35ec19f2f908d9542f95fb321f6dcdeca90ad14653c1c4e5e3aadf38853_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:5aa5b5ff189eb467cbb6a0787cdebf8f6458feb9d29d8ade21e30b2f830ed6af_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:998fd280bc7802128a3d66b2fafbaef0c2722f202c677816a46f99d23deac67c_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:dffc7bc40641f1c6c69d33c4c5763b82121553852ef699ca7630b4927be08a83_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:2a9120360f7e521031cedaa4365bf9f54c095008494dcb988b096e61c22a40d1_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:c99473732aab64b637d31ddc101bdece73f45ab1bcf7acc9b3abaf801370ea5f_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:fdb481dca399854fc90c028814db5a22a61bb35526e772743f7b7b1552adca96_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:feb78be12e6658441ff35595b04c0f79f036f1f9f6fc19eccec31ed07d9001c2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:4350b1467a9e6554059413bce5125dcb24c43dede6b8c580804ba91105d7e905_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:5e1e59193f13ff643aa177058abe62b4eb004a03875e3f4f2f271dab2cb4b988_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9670a3fbe6140fa5c9202b59102c3abe6325908641d722ad019d2b521a9ec2dc_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:ea06c012619e1376714c96e03222cc874eb544c906a3e71e66cf5dcf6a1cc117_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:9cd6aa4931b077c33376c29a0803d2d8acdc9f366b53072929aaf2dc6bed8a8e_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:c56237aa6129912c38a107b967b4310bf82ab1b527ba033a8d1b74fc5ce56821_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efc98e8d7e443e4bf91e19f4216b54e3d55191fcc8fe234b06a8f8d70ccde412_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:efdde537fb229e8e1d5590fc00905f23d165a7ec22586eddd3a0f9b45d6e0d6c_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:2b585bb9eec9da088a345cff9f6344c4f039c3573af2de0e9a10cbe3586e8e10_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:6a0e334dff8b2d68bc6b9146e13e3c4f14da7d2701f16f664edb17d953441345_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:c69ab0279af4125ca9795fe7167dd6e0d9e101596828bd27d14514a0996ef5b2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:da63c87f74d7edfbfb5f382630032df8a7cc56b7c872e451ff80bf05f43d7c4b_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:163e9463b7925caccb1b8cfdfd3c45c73aca7e1f6575ebbbc9e4a07ecb5d85aa_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:3cf4eccfd0b8006b3792aef8220c645687d1b7e2190017e85dc70cec017167de_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:536bbfac8ad1c9e7f095ad5c7622e9c69182f4bd8bad143a331605143a185d3d_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:a595d01b330efc0b2e4881493ac1ec962571e7fb8dad51aeb2e0ea1fecb5a7a3_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:36d7a7edebcb8855295b32e93b1d4f71a2744c2ed5bae52aa6975afc348b5c85_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:552f9f09b3d45a3bfe427e2a5dd64f6b0ad8f5027a1cd2f5107c68f99eaba441_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:ae823106789a7fb6653329640d556662a44179cd5510ce06ef189bc3a4583bab_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:cf4c703fae9d841cfdb9cca9b110ff6eaaf9dfd764306174bdc648a4d10a5f96_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:082a8add79dae680e605046c16eeed34f9b66afd2152736745756c31ba746a23_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:9443de3ef2165a44647fa2be174d308cbca794211ecd8bb04576aa6912827aba_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:a0554318e3e2d27c9fea0c9199143216a797ff04566da706227ecd50af26fc37_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:d82df0b30a79b46c0976f5d20920033573bb9634c44d7eeeb5b28a8bfcbff9f5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:19098881765bacfa186f64d3da35d10e1102ffe5d6c07685c321f67ff3acf981_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:47c2632a4e1d7feac3dbfa1542e5e1f18b8e96a7106e256b6cdad393c43387a2_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:7b5ae76cc31348a34844ee2b2f4a0659f875ecf775b4b7792aa6943f379f575b_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:c1425b33959e968c6600e0e4eec9b49493d793b6b03e2d8964a77f0b97b09adc_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:a181f3b068b285ff1333443afd093a2d6178b4591532a1cfa64f02117349b2e1_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:ca9e460d024b1f0c9e6226816de196736bc4a303a6cdd1974521843d1345f1a3_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:d8774c84f8b36f1bcc1519c3a3b830b7bcabcafe6fc7fb095fd29def9e3f7f49_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:f1e6ae2100aef34b27b56c585bc2d5c4b76eb4bb292beba9377a391c8118ff00_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:333ee37c4b31b3454e63bf2c2e29e15c0181c724d36789d7964834f84b8152c9_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:40b2a29a458fa93f6eef49329065303479df95eaeafb2a459640df634a72467d_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:86b9815fe822bd4fd96fcb37ee47e16c0be81894237228b4712364200d7e0aaa_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:cce0932612562d839104acc908e05957b3e4181073a1311cabb454e9969b34b8_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:5b83bdd7cb6ec7187b2a6daf78231e23e812223a7ccf5d1d63e8ebcd90a2b588_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:bd9c2a206592563558d641ab8ed64082ed93d490fe831a4a9986e640850a9664_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:cae2217e1de8dc4580fe5efec2349c04df85f2e81c093e6dd4a5c95edca3a937_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:db68a44207202d5ae8ce90708a0f6f5363982c77fa15387ce6056a0950e52c97_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:0588ace10b22bc73e4d164c124b7930f0f761ad90f070394a908c6d10dc73b91_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:82c267fb17f79da96ad6f9852023fc746604ea55c5dd8b82dae2fe42c7d24966_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:8f63d9413d0a7baca229804c1b49df332363d581d6cfb20f6282a420bba82181_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:f6dc22ed5efadff616cfb356a46073cc6e0c9754e998af1b873e29c322a4dc7b_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:01ac5e8fb78f021214a42155e12b3a62466c3dfc921218a5f268073f9cbdd8a4_arm64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:134d64302e7377368ad48cac526031930861d603c0ecbd7c6f53a25e9d62affb_s390x		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:24bfccb828e87258cf4f5b919a94669d513898eb37a57d738a3ad52686d6a7b4_amd64		—
Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.11:registry.redhat.io/rhacm2/thanos-rhel9@sha256:eb2fba1996861e9dd2a7777e15fe88a3d691eb46a51c6f5a2db6b24f2714313c_ppc64le		—

Threats

Impact Important

CVE-2026-44486

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44487

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44488

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44492

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-289 - Authentication Bypass by Alternate Name

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44494

A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44495

A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.

7.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44496

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-44990

A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2025-13465

Known not affected 160 products, the same list as for CVE-2025-13465

Threats

Impact Important

CVE-2026-46384

An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 4 products, the same list as for CVE-2025-9288

Known not affected 160 products, the same list as for CVE-2025-9288

Threats

Impact Important

CVE-2026-46385

A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2025-9288

Known not affected 160 products, the same list as for CVE-2025-9288

Threats

Impact Important

References

107 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:41064	self
https://access.redhat.com/security/cve/CVE-2025-13465	external
https://access.redhat.com/security/cve/CVE-2025-9288	external
https://access.redhat.com/security/cve/CVE-2026-21721	external
https://access.redhat.com/security/cve/CVE-2026-22029	external
https://access.redhat.com/security/cve/CVE-2026-25639	external
https://access.redhat.com/security/cve/CVE-2026-42508	external
https://access.redhat.com/security/cve/CVE-2026-44486	external
https://access.redhat.com/security/cve/CVE-2026-44487	external
https://access.redhat.com/security/cve/CVE-2026-44488	external
https://access.redhat.com/security/cve/CVE-2026-44492	external
https://access.redhat.com/security/cve/CVE-2026-44494	external
https://access.redhat.com/security/cve/CVE-2026-44495	external
https://access.redhat.com/security/cve/CVE-2026-44496	external
https://access.redhat.com/security/cve/CVE-2026-44990	external
https://access.redhat.com/security/cve/CVE-2026-46384	external
https://access.redhat.com/security/cve/CVE-2026-46385	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-9288	self
https://bugzilla.redhat.com/show_bug.cgi?id=2389980	external
https://www.cve.org/CVERecord?id=CVE-2025-9288	external
https://nvd.nist.gov/vuln/detail/CVE-2025-9288	external
https://github.com/browserify/sha.js/pull/78	external
https://github.com/browserify/sha.js/security/adv…	external
https://www.cve.org/CVERecord?id=CVE-2025-9287	external
https://access.redhat.com/security/cve/CVE-2025-13465	self
https://bugzilla.redhat.com/show_bug.cgi?id=2431740	external
https://www.cve.org/CVERecord?id=CVE-2025-13465	external
https://nvd.nist.gov/vuln/detail/CVE-2025-13465	external
https://github.com/lodash/lodash/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-21721	self
https://bugzilla.redhat.com/show_bug.cgi?id=2433242	external
https://www.cve.org/CVERecord?id=CVE-2026-21721	external
https://nvd.nist.gov/vuln/detail/CVE-2026-21721	external
https://grafana.com/security/security-advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-22029	self
https://bugzilla.redhat.com/show_bug.cgi?id=2428412	external
https://www.cve.org/CVERecord?id=CVE-2026-22029	external
https://nvd.nist.gov/vuln/detail/CVE-2026-22029	external
https://github.com/remix-run/react-router/securit…	external
https://access.redhat.com/security/cve/CVE-2026-25639	self
https://bugzilla.redhat.com/show_bug.cgi?id=2438237	external
https://www.cve.org/CVERecord?id=CVE-2026-25639	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25639	external
https://github.com/axios/axios/commit/28c721588c7…	external
https://github.com/axios/axios/releases/tag/v1.13.5	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42508	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480688	external
https://www.cve.org/CVERecord?id=CVE-2026-42508	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42508	external
https://go.dev/cl/781220	external
https://go.dev/issue/79568	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5021	external
https://access.redhat.com/security/cve/CVE-2026-44486	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487947	external
https://www.cve.org/CVERecord?id=CVE-2026-44486	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44486	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44487	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487948	external
https://www.cve.org/CVERecord?id=CVE-2026-44487	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44487	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487949	external
https://www.cve.org/CVERecord?id=CVE-2026-44488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44488	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487938	external
https://www.cve.org/CVERecord?id=CVE-2026-44492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44492	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44494	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487942	external
https://www.cve.org/CVERecord?id=CVE-2026-44494	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44494	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44495	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487937	external
https://www.cve.org/CVERecord?id=CVE-2026-44495	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44495	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44496	self
https://bugzilla.redhat.com/show_bug.cgi?id=2487943	external
https://www.cve.org/CVERecord?id=CVE-2026-44496	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44496	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-44990	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488565	external
https://www.cve.org/CVERecord?id=CVE-2026-44990	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44990	external
https://github.com/apostrophecms/apostrophe/secur…	external
https://access.redhat.com/security/cve/CVE-2026-46384	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483482	external
https://www.cve.org/CVERecord?id=CVE-2026-46384	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46384	external
https://github.com/iskorotkov/avro/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-46385	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483475	external
https://www.cve.org/CVERecord?id=CVE-2026-46385	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46385	external
https://github.com/iskorotkov/avro/security/advis…	external

JSON

To clipboard

Loading 2.4 MB of JSON…

CVE-2026-44494 (GCVE-0-2026-44494)

Vulnerability from cvelistv5 – Published: 2026-06-11 15:32 – Updated: 2026-09-11 12:09

Title

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Summary

Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into a full Man-in-the-Middle (MITM) attack — intercepting, reading, and modifying all HTTP traffic including authentication credentials. The HTTP adapter at lib/adapters/http.js:670 reads config.proxy via standard property access, which traverses the prototype chain. Because proxy is not present in Axios defaults, the merged config object has no own proxy property, making it trivially injectable via prototype pollution. Once injected, setProxy() routes all HTTP requests through the attacker's proxy server. This vulnerability is fixed in 1.16.0.

Severity

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 00:00 UTC

CWE

CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Assigner

GitHub_M mitre root

References

54 references

URL	Tags
https://github.com/axios/axios/security/advisorie…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44494	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2487942	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36882	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20938	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20889	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36108	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54188	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36611	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28964	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29864	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40795	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29800	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40792	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27044	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34794	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34527	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42085	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

83 products

Vendor	Product	Version
axios	axios	Affected: >= 1.0.0, < 1.16.0
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat AMQ Broker 7.14.1	cpe:/a:redhat:amq_broker:7.14
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Data Grid 8.6.2	cpe:/a:redhat:jboss_data_grid:8
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784312384 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783351002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782157085 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783348181 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783350952 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157514 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1783451729 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784578812 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908361 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1779371594 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1779293013 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783919486 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Container Native Virtualization 4.13	Unaffected: 1782426816 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.13::el9
Red Hat	Red Hat Container Native Virtualization 4.14	Unaffected: 1782356760 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.14::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782761244 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1782166952 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783690532 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787347991 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1786477760 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1782911957 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1782127091 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782244020 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782243791 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1782171032 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1782313844 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1784148076 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1781731914 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784134078 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1782913451 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498475 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498792 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1781937133 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201894 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201696 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201851 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782231869 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.19	Unaffected: 1781174698 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1782253070 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1782243376 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1784105894 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel for Spring Boot 4	cpe:/a:redhat:camel_spring_boot:4
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44494",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-13T03:55:29.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.14"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat AMQ Broker 7.14.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat Data Grid 8.6.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784312384",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783351002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157085",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783348181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783350952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157514",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783451729",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784578812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908361",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779371594",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779293013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783919486",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782426816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782356760",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782761244",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782166952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-ui-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783690532",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787347991",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786477760",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782911957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782127091",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782244020",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782243791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782171032",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782313844",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784148076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781731914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784134078",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782913451",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498475",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201696",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782231869",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781174698",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782253070",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782243376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784105894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-ui-rhel8",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp21/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp22/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel7",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel8",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel9",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-hub",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:camel_spring_boot:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel for Spring Boot 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel8",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel9",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-dashboard-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-11T15:32:03.155Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-915",
                "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:08.577Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44494"
          },
          {
            "name": "RHBZ#2487942",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44494.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20938"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20889"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36108"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54188"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36611"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28964"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29864"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40795"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29800"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40792"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27044"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34794"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34527"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34525"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42085"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66488: Red Hat AMQ Broker 7.14.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36108: Red Hat Container Native Virtualization 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33005: Red Hat Container Native Virtualization 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29197: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54188: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29864: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29800: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34530: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34527: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34525: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42085: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-11T17:01:12.945Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-11T15:32:03.155Z",
            "value": "Made public."
          }
        ],
        "title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "axios",
          "vendor": "axios",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.16.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application\u0027s dependency tree to be escalated into a full Man-in-the-Middle (MITM) attack \u2014 intercepting, reading, and modifying all HTTP traffic including authentication credentials. The HTTP adapter at lib/adapters/http.js:670 reads config.proxy via standard property access, which traverses the prototype chain. Because proxy is not present in Axios defaults, the merged config object has no own proxy property, making it trivially injectable via prototype pollution. Once injected, setProxy() routes all HTTP requests through the attacker\u0027s proxy server. This vulnerability is fixed in 1.16.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-441",
              "description": "CWE-441: Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-11T15:32:03.155Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
        }
      ],
      "source": {
        "advisory": "GHSA-35jp-ww65-95wh",
        "discovery": "UNKNOWN"
      },
      "title": "Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44494",
    "datePublished": "2026-06-11T15:32:03.155Z",
    "dateReserved": "2026-05-06T17:18:51.783Z",
    "dateUpdated": "2026-09-11T12:09:08.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44495 (GCVE-0-2026-44495)

Vulnerability from cvelistv5 – Published: 2026-06-11 15:33 – Updated: 2026-09-11 12:09

Title

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Summary

Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.

Severity

7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')
CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Assigner

GitHub_M mitre root

References

53 references

URL	Tags
https://github.com/axios/axios/security/advisorie…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44495	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2487937	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36882	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20938	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20889	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36108	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53840	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54188	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36611	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28964	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54555	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40795	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27063	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40792	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27044	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40768	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

83 products

Vendor	Product	Version
axios	axios	Affected: >= 1.0.0, < 1.15.2 Affected: >= 0.19.0, < 0.31.1
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.10-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Data Grid 8.6.2	cpe:/a:redhat:jboss_data_grid:8
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784312384 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783351002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782157085 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783348181 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783350952 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157514 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1783451729 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784578812 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908361 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1779371594 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1779293013 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1782761510 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783919486 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Container Native Virtualization 4.13	Unaffected: 1782426816 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.13::el9
Red Hat	Red Hat Container Native Virtualization 4.14	Unaffected: 1781807944 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.14::el9
Red Hat	Red Hat Container Native Virtualization 4.15	Unaffected: 1786328346 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.15::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782761244 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1782166952 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783690532 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787347991 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1786753387 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1786477760 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1782911957 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1782127091 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782244020 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1786488312 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781695012 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1784148076 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1781731914 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784134078 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1784119173 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498792 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1781937133 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201894 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201696 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201851 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782231869 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel for Spring Boot 4	cpe:/a:redhat:camel_spring_boot:4
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44495",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T03:55:39.431622Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T12:47:14.158Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.10-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat Data Grid 8.6.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784312384",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783351002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157085",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783348181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783350952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157514",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783451729",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784578812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908361",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779371594",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779293013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782761510",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783919486",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782426816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781807944",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786328346",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782761244",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782166952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-ui-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783690532",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787347991",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786753387",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786477760",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782911957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782127091",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782244020",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786488312",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781695012",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784148076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781731914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784134078",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784119173",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201696",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782231869",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-ui-rhel8",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp21/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp22/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel7",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel8",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel9",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-hub",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:camel_spring_boot:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel for Spring Boot 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-ui-rhel8",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-ui-rhel9",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-dashboard-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-11T15:33:12.433Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-915",
                "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:09.338Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44495"
          },
          {
            "name": "RHBZ#2487937",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20938"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20889"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36108"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53840"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54188"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36611"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28964"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54555"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40795"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27063"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40792"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27044"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40768"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36108: Red Hat Container Native Virtualization 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27944: Red Hat Container Native Virtualization 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53840: Red Hat Container Native Virtualization 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29197: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54188: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-11T17:00:53.999Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-11T15:33:12.433Z",
            "value": "Made public."
          }
        ],
        "title": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "axios",
          "vendor": "axios",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.15.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 0.19.0, \u003c 0.31.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-11T15:33:12.433Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
        }
      ],
      "source": {
        "advisory": "GHSA-3g43-6gmg-66jw",
        "discovery": "UNKNOWN"
      },
      "title": "Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44495",
    "datePublished": "2026-06-11T15:33:12.433Z",
    "dateReserved": "2026-05-06T18:28:20.885Z",
    "dateUpdated": "2026-09-11T12:09:09.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44496 (GCVE-0-2026-44496)

Vulnerability from cvelistv5 – Published: 2026-06-11 15:34 – Updated: 2026-09-11 12:09

Title

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Summary

Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 17:21 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-1333 - Inefficient Regular Expression Complexity

Assigner

GitHub_M mitre root

References

47 references

URL	Tags
https://github.com/axios/axios/security/advisorie…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44496	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2487943	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36882	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20938	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20889	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36611	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28964	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34766	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27063	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27044	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33683	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28571	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42085	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59360	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

75 products

Vendor	Product	Version
axios	axios	Affected: >= 1.0.0, < 1.16.0 Affected: < 0.32.0
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat AMQ Broker 7.14.1	cpe:/a:redhat:amq_broker:7.14
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260715-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260715-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat build of Apicurio Registry 3.3.1	Unaffected: ui-rhel8 , < * (rpm) Unaffected: ui-rhel9 , < * (rpm) cpe:/a:redhat:apicurio_registry:3.3
Red Hat	Red Hat Data Grid 8.6.2	cpe:/a:redhat:jboss_data_grid:8
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784312384 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783351002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782157085 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783348181 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783350952 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157514 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1783451729 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784578812 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908361 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1779371594 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1779293013 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783919486 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782761244 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1782166952 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783690532 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787347991 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1786753387 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1782911957 , < * (rpm) Unaffected: 1787056403 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1782127091 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782244020 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1782880472 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781695012 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1781731914 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498475 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782498792 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1781937133 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201894 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201696 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201851 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782231869 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1782487717 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1781937357 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1781878070 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1784105894 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel for Spring Boot 4	cpe:/a:redhat:camel_spring_boot:4
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44496",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T17:21:54.440483Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T17:22:09.558Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.14"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat AMQ Broker 7.14.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260715-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3.3"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry",
            "product": "Red Hat build of Apicurio Registry 3.3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "ui-rhel8",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "ui-rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat Data Grid 8.6.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784312384",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783351002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157085",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783348181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783350952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157514",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783451729",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784578812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908361",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779371594",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779293013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783919486",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782761244",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782166952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-ui-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783690532",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787347991",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786753387",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782911957",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787056403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782127091",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782244020",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782880472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781695012",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781731914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498475",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782498792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201696",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782231869",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782487717",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781878070",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784105894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-ui-rhel8",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp21/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp22/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel7",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel8",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel9",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-hub",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:camel_spring_boot:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel for Spring Boot 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "axios",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-dashboard-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-11T15:34:28.492Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1333",
                "description": "Inefficient Regular Expression Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:10.268Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44496"
          },
          {
            "name": "RHBZ#2487943",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20938"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20889"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36611"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28964"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34766"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27063"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27044"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33683"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30076"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28571"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42085"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59360"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66488: Red Hat AMQ Broker 7.14.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20938: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29197: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34766: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33683: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30076: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28571: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42085: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59360: Red Hat build of Apicurio Registry 3.3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-11T17:01:15.856Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-11T15:34:28.492Z",
            "value": "Made public."
          }
        ],
        "title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "axios",
          "vendor": "axios",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.16.0"
            },
            {
              "status": "affected",
              "version": "\u003c 0.32.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333: Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-11T15:34:28.492Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
        }
      ],
      "source": {
        "advisory": "GHSA-hfxv-24rg-xrqf",
        "discovery": "UNKNOWN"
      },
      "title": "Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44496",
    "datePublished": "2026-06-11T15:34:28.492Z",
    "dateReserved": "2026-05-06T18:28:20.885Z",
    "dateUpdated": "2026-09-11T12:09:10.268Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44990 (GCVE-0-2026-44990)

Vulnerability from cvelistv5 – Published: 2026-06-12 20:39 – Updated: 2026-09-10 12:05

Title

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

Summary

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a disallowed `xmp` element into live HTML or JavaScript. This is a sanitizer bypass in the default `disallowedTagsMode: 'discard'` path and can lead to stored XSS in applications that render sanitized output back to users. Version 2.17.4 patches the issue.

Severity

9.3 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-15 13:04 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M mitre root

References

31 references

URL	Tags
https://github.com/apostrophecms/apostrophe/secur…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44990	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488565	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36882	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46685	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63103	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63046	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48124	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51349	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

31 products

Vendor	Product	Version
apostrophecms	sanitize-html	Affected: < 2.17.4
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784312384 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911977 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786668856 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783351002 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1785078604 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783348181 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783350952 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1785078581 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1783451729 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784578812 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908361 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787335105 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Container Native Virtualization 4.19	Unaffected: 1784844382 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.19::el9
Red Hat	Red Hat Container Native Virtualization 4.20	Unaffected: 1784629964 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1788350963 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1788359934 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1787746382 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1784737150 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785922764 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785956497 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785937325 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44990",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T13:04:32.468259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-15T13:04:56.814Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784312384",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786668856",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783351002",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785078604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783348181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783350952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785078581",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783451729",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784578812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908361",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787335105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784844382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat Container Native Virtualization 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784629964",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788350963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788359934",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787746382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785922764",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785956497",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785937325",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "opentelemetry-collector-contrib",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-sanitize-html",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T20:39:47.065Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:05:09.696Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44990"
          },
          {
            "name": "RHBZ#2488565",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44990.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46685"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46598"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63103"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63046"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48124"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51349"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51196"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46685: Red Hat Container Native Virtualization 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46598: Red Hat Container Native Virtualization 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63103: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63046: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60441: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48124: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51349: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51196: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51197: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T21:02:24.911Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T20:39:47.065Z",
            "value": "Made public."
          }
        ],
        "title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "sanitize-html",
          "vendor": "apostrophecms",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.17.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a disallowed `xmp` element into live HTML or JavaScript. This is a sanitizer bypass in the default `disallowedTagsMode: \u0027discard\u0027` path and can lead to stored XSS in applications that render sanitized output back to users. Version 2.17.4 patches the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T20:39:47.065Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
        }
      ],
      "source": {
        "advisory": "GHSA-rpr9-rxv7-x643",
        "discovery": "UNKNOWN"
      },
      "title": "Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44990",
    "datePublished": "2026-06-12T20:39:47.065Z",
    "dateReserved": "2026-05-08T16:23:33.265Z",
    "dateUpdated": "2026-09-10T12:05:09.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46384 (GCVE-0-2026-46384)

Vulnerability from cvelistv5 – Published: 2026-05-29 19:58 – Updated: 2026-09-09 12:04

Title

iskorotkov/avro: Integer Overflow in Avro Decoder

Summary

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-int arithmetic. On 32-bit targets (GOARCH=386, arm, mips, wasm, etc.), the truncation paths can silently bypass byte-slice limits, select the wrong union branch, or hit the OCF negative-make panic via wrap. Three sub-issues are not 32-bit-specific: cumulative-size arithmetic overflow in arrayDecoder.Decode / mapDecoder.Decode / mapDecoderUnmarshaler.Decode (wraps at math.MaxInt64 on amd64 / arm64 and bypasses MaxSliceAllocSize / MaxMapAllocSize), math.MinInt negation in block-header handling, and make([]byte, size) with a negative size in OCF block reads — all three panic or bypass caps on any platform, giving an attacker a denial-of-service primitive there. This vulnerability is fixed in 2.33.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 21:35 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

GitHub_M mitre root

References

14 references

URL	Tags
https://github.com/iskorotkov/avro/security/advis…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-46384	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2483482	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT

Impacted products

14 products

Vendor	Product	Version
iskorotkov	avro	Affected: < 2.33.0
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-19 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784060681 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784561376 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784906628 , < * (rpm) Unaffected: 1785442872 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783578847 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383730 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908968 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787316467 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784562060 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-46384",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T21:35:10.446724Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T21:35:18.534Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-19",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784060681",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784561376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784906628",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785442872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783578847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908968",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787316467",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784562060",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector-contrib",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-29T19:58:21.535Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T12:04:43.443Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-46384"
          },
          {
            "name": "RHBZ#2483482",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46384.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-29T21:02:03.061Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-29T19:58:21.535Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
        "workarounds": [
          {
            "lang": "en",
            "value": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "avro",
          "vendor": "iskorotkov",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.33.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-int arithmetic. On 32-bit targets (GOARCH=386, arm, mips, wasm, etc.), the truncation paths can silently bypass byte-slice limits, select the wrong union branch, or hit the OCF negative-make panic via wrap. Three sub-issues are not 32-bit-specific: cumulative-size arithmetic overflow in arrayDecoder.Decode / mapDecoder.Decode / mapDecoderUnmarshaler.Decode (wraps at math.MaxInt64 on amd64 / arm64 and bypasses MaxSliceAllocSize / MaxMapAllocSize), math.MinInt negation in block-header handling, and make([]byte, size) with a negative size in OCF block reads \u2014 all three panic or bypass caps on any platform, giving an attacker a denial-of-service primitive there. This vulnerability is fixed in 2.33.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-29T19:58:21.535Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
        }
      ],
      "source": {
        "advisory": "GHSA-mc57-h6j3-3hmv",
        "discovery": "UNKNOWN"
      },
      "title": "iskorotkov/avro: Integer Overflow in Avro Decoder"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-46384",
    "datePublished": "2026-05-29T19:58:21.535Z",
    "dateReserved": "2026-05-13T19:53:47.922Z",
    "dateUpdated": "2026-09-09T12:04:43.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-46385 (GCVE-0-2026-46385)

Vulnerability from cvelistv5 – Published: 2026-05-29 19:58 – Updated: 2026-09-09 12:05

Title

iskorotkov/avro: CPU Exhaustion in Avro Decoder

Summary

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 / arm64 targets — so a producer can declare a block of up to math.MaxInt64 (~9.2 × 10¹⁸) elements followed by EOF (or any truncated payload), and the decoder will attempt that many no-op iterations before propagating the error. The realistic ceiling is "indefinite until the worker is killed externally" — a single hostile payload pins a CPU core until the process is OOM-killed, deadline-cancelled, or terminated. Remote, unauthenticated denial-of-service. This vulnerability is fixed in 2.33.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-01 16:22 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

GitHub_M mitre root

References

14 references

URL	Tags
https://github.com/iskorotkov/avro/security/advis…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-46385	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2483475	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT

Impacted products

14 products

Vendor	Product	Version
iskorotkov	avro	Affected: < 2.33.0
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-19 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784060681 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784561376 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784906628 , < * (rpm) Unaffected: 1785442872 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783578847 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383730 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908968 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787316467 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784562060 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-46385",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-01T16:22:43.598595Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-01T16:36:20.424Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-19",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784060681",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784561376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784906628",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785442872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783578847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908968",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787316467",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784562060",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector-contrib",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-29T19:58:59.667Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-835",
                "description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T12:05:07.261Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-46385"
          },
          {
            "name": "RHBZ#2483475",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46385.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-29T21:01:37.087Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-29T19:58:59.667Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
        "workarounds": [
          {
            "lang": "en",
            "value": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "avro",
          "vendor": "iskorotkov",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.33.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader\u0027s error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 / arm64 targets \u2014 so a producer can declare a block of up to math.MaxInt64 (~9.2 \u00d7 10\u00b9\u2078) elements followed by EOF (or any truncated payload), and the decoder will attempt that many no-op iterations before propagating the error. The realistic ceiling is \"indefinite until the worker is killed externally\" \u2014 a single hostile payload pins a CPU core until the process is OOM-killed, deadline-cancelled, or terminated. Remote, unauthenticated denial-of-service. This vulnerability is fixed in 2.33.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-29T19:58:59.667Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
        }
      ],
      "source": {
        "advisory": "GHSA-w8j3-pq8g-8m7w",
        "discovery": "UNKNOWN"
      },
      "title": "iskorotkov/avro: CPU Exhaustion in Avro Decoder"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-46385",
    "datePublished": "2026-05-29T19:58:59.667Z",
    "dateReserved": "2026-05-13T19:53:47.922Z",
    "dateUpdated": "2026-09-09T12:05:07.261Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:41064

CVE-2026-44494 (GCVE-0-2026-44494)

CVE-2026-44495 (GCVE-0-2026-44495)

CVE-2026-44496 (GCVE-0-2026-44496)

CVE-2026-44990 (GCVE-0-2026-44990)

CVE-2026-46384 (GCVE-0-2026-46384)

CVE-2026-46385 (GCVE-0-2026-46385)

Tags

Sightings

Nomenclature

Related by attack behaviour