GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2026:68333

Vulnerability from csaf_redhat - Published: 2026-09-16 17:16 - Updated: 2026-09-17 06:43
Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update
Severity
Important
Notes
Topic: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Security Fix(es): * Apache HttpComponents Core: Denial of Service via excessive HTTP headers (CVE-2026-54399) * Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks (CVE-2026-54428) * Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075) * Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076) * SeaweedFS: Information disclosure via S3 API gateway path traversal (CVE-2026-55874) * SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway (CVE-2026-58372) * protobufjs: Denial of Service via crafted .proto schema (CVE-2026-59877) * Quarkus REST: Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308) * Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833) * Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831) * Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851) * Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745) * Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746) * Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819) * Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899) * Apache Thrift: Denial of Service via integer overflow or wraparound (CVE-2026-55969) * Apache Thrift: Denial of Service via improper handling of highly compressed data (CVE-2026-48586) * Apache Thrift: Denial of Service due to uncontrolled resource allocation (CVE-2026-45112) * brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVE-2026-69152) * ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) * jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494) * DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978) * OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * Go net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * Go encoding/xml: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * Go crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869) * golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions (CVE-2026-56854) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-15075

A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Workaround
Threats
Impact Important
CVE-2026-15076

A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server's domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker's account on that service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-16308

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine (JVM) heap memory, leading to an OutOfMemoryError. The primary consequence is a denial of service, causing the application to crash.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Threats
Impact Important
CVE-2026-45112

A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or throttle resource allocation, leading to potential system instability or unresponsiveness.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-48586

A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-49978

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `<template>.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Threats
Impact Important
CVE-2026-54399

A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or excessive header length.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Workaround
Threats
Impact Important
CVE-2026-54428

A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size limit is applied. This can lead to the affected system becoming unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-54399
Known not affected 16 products, the same list as for CVE-2026-54399
Threats
Impact Important
CVE-2026-55831

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-55833

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-55851

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a denial of service (DoS) due to memory exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-55874

A flaw was found in SeaweedFS, a distributed storage system. The S3 API gateway in SeaweedFS does not properly validate `X-Amz-Copy-Source` headers, specifically failing to reject "dot-dot" path segments. This allows an authenticated user, even if scoped to a single bucket, to read objects from other buckets through server-side copy operations. The vulnerability results in unauthorized information disclosure across storage buckets.

7.7 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-55969

A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-772 - Missing Release of Resource after Effective Lifetime
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-56746

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-807 - Reliance on Untrusted Inputs in a Security Decision
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-56819

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-911 - Improper Update of Reference Count
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-58372

A flaw was found in SeaweedFS. An authenticated remote attacker with write access to a single bucket could exploit a path traversal vulnerability in the S3 gateway. By crafting a DeleteObjects XML request body with specific object keys containing directory traversal sequences, the attacker could bypass authorization controls. This allows the attacker to delete arbitrary objects in other tenants' buckets, leading to unauthorized data deletion.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 2 products, the same list as for CVE-2026-33818
Known not affected 18 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Workaround
Threats
Impact Important
CVE-2026-59877

A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 —
Workaround
Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 —
Workaround
Threats
Impact Important
CVE-2026-59899

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-68494

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 6 products, the same list as for CVE-2026-15075
Known not affected 14 products, the same list as for CVE-2026-15075
Threats
Impact Important
CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 2 products, the same list as for CVE-2026-59877
Known not affected 18 products, the same list as for CVE-2026-59877
Threats
Impact Important
CVE-2026-69192

A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE-1389 - Incorrect Parsing of Numbers with Different Radices
Affected products
Fixed 2 products, the same list as for CVE-2026-49978
Known not affected 18 products, the same list as for CVE-2026-49978
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68333 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://bugzilla.redhat.com/show_bug.cgi?id=2495031 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496101 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496106 external
https://bugzilla.redhat.com/show_bug.cgi?id=2498092 external
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://bugzilla.redhat.com/show_bug.cgi?id=2498127 external
https://bugzilla.redhat.com/show_bug.cgi?id=2499914 external
https://bugzilla.redhat.com/show_bug.cgi?id=2499919 external
https://bugzilla.redhat.com/show_bug.cgi?id=2500695 external
https://bugzilla.redhat.com/show_bug.cgi?id=2503101 external
https://bugzilla.redhat.com/show_bug.cgi?id=2503103 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505422 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505698 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505911 external
https://bugzilla.redhat.com/show_bug.cgi?id=2505980 external
https://bugzilla.redhat.com/show_bug.cgi?id=2506373 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507433 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507434 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507439 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507482 external
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://bugzilla.redhat.com/show_bug.cgi?id=2510801 external
https://bugzilla.redhat.com/show_bug.cgi?id=2511026 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://bugzilla.redhat.com/show_bug.cgi?id=2525639 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-15075 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499919 external
https://www.cve.org/CVERecord?id=CVE-2026-15075 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15075 external
https://gitlab.eclipse.org/security/cve-assignmen… external
https://access.redhat.com/security/cve/CVE-2026-15076 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499914 external
https://www.cve.org/CVERecord?id=CVE-2026-15076 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15076 external
https://gitlab.eclipse.org/security/cve-assignmen… external
https://access.redhat.com/security/cve/CVE-2026-16308 self
https://bugzilla.redhat.com/show_bug.cgi?id=2506373 external
https://www.cve.org/CVERecord?id=CVE-2026-16308 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16308 external
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-45112 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507439 external
https://www.cve.org/CVERecord?id=CVE-2026-45112 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45112 external
http://www.openwall.com/lists/oss-security/2026/0… external
https://lists.apache.org/thread/7v3jhgwfbmhx42424… external
https://lists.apache.org/thread/hl9kmf1z2o3lxvspo… external
https://access.redhat.com/security/cve/CVE-2026-48586 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507434 external
https://www.cve.org/CVERecord?id=CVE-2026-48586 external
https://nvd.nist.gov/vuln/detail/CVE-2026-48586 external
http://www.openwall.com/lists/oss-security/2026/0… external
https://lists.apache.org/thread/p008svsjf9p6bj47w… external
https://access.redhat.com/security/cve/CVE-2026-49978 self
https://bugzilla.redhat.com/show_bug.cgi?id=2500695 external
https://www.cve.org/CVERecord?id=CVE-2026-49978 external
https://nvd.nist.gov/vuln/detail/CVE-2026-49978 external
https://github.com/cure53/DOMPurify/commit/ca30f0… external
https://github.com/cure53/DOMPurify/releases/tag/3.4.7 external
https://github.com/cure53/DOMPurify/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-54399 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496101 external
https://www.cve.org/CVERecord?id=CVE-2026-54399 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54399 external
http://www.openwall.com/lists/oss-security/2026/07/01/4 external
https://lists.apache.org/thread/zmxh1pl2zohov5ntd… external
https://access.redhat.com/security/cve/CVE-2026-54428 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496106 external
https://www.cve.org/CVERecord?id=CVE-2026-54428 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54428 external
http://www.openwall.com/lists/oss-security/2026/07/01/3 external
https://lists.apache.org/thread/5zjp8vczvxq19pw2r… external
https://access.redhat.com/security/cve/CVE-2026-55831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503103 external
https://www.cve.org/CVERecord?id=CVE-2026-55831 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55831 external
https://github.com/netty/netty/commit/5b68c61f37a… external
https://github.com/netty/netty/commit/bb2ff68a1fb… external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/releases/tag/netty… external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-55833 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503101 external
https://www.cve.org/CVERecord?id=CVE-2026-55833 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55833 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-55851 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505698 external
https://www.cve.org/CVERecord?id=CVE-2026-55851 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55851 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-55874 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498092 external
https://www.cve.org/CVERecord?id=CVE-2026-55874 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55874 external
https://github.com/seaweedfs/seaweedfs/commit/b44… external
https://github.com/seaweedfs/seaweedfs/pull/9929 external
https://github.com/seaweedfs/seaweedfs/releases/t… external
https://github.com/seaweedfs/seaweedfs/security/a… external
https://access.redhat.com/security/cve/CVE-2026-55969 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507433 external
https://www.cve.org/CVERecord?id=CVE-2026-55969 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55969 external
http://www.openwall.com/lists/oss-security/2026/0… external
https://lists.apache.org/thread/xmkgd107k795hyrg5… external
https://access.redhat.com/security/cve/CVE-2026-56745 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505911 external
https://www.cve.org/CVERecord?id=CVE-2026-56745 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56745 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-56746 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505422 external
https://www.cve.org/CVERecord?id=CVE-2026-56746 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56746 external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-56819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2505980 external
https://www.cve.org/CVERecord?id=CVE-2026-56819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56819 external
https://github.com/netty/netty/commit/5b68c61f37a… external
https://github.com/netty/netty/security/advisorie… external
https://access.redhat.com/security/cve/CVE-2026-56854 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525639 external
https://www.cve.org/CVERecord?id=CVE-2026-56854 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56854 external
https://go.dev/cl/797040 external
https://go.dev/issue/80213 external
https://pkg.go.dev/vuln/GO-2026-6303 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-58372 self
https://bugzilla.redhat.com/show_bug.cgi?id=2495031 external
https://www.cve.org/CVERecord?id=CVE-2026-58372 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58372 external
https://github.com/geo-chen/oss/blob/main/seaweedfs.md external
https://github.com/seaweedfs/seaweedfs/commit/034… external
https://github.com/seaweedfs/seaweedfs/pull/9931 external
https://github.com/seaweedfs/seaweedfs/security/a… external
https://www.vulncheck.com/advisories/seaweedfs-cr… external
https://access.redhat.com/security/cve/CVE-2026-59869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://www.cve.org/CVERecord?id=CVE-2026-59869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869 external
https://github.com/nodeca/js-yaml/commit/24f13e79… external
https://github.com/nodeca/js-yaml/commit/59423c6f… external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-59877 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498127 external
https://www.cve.org/CVERecord?id=CVE-2026-59877 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59877 external
https://github.com/protobufjs/protobuf.js/commit/… external
https://github.com/protobufjs/protobuf.js/commit/… external
https://github.com/protobufjs/protobuf.js/pull/2352 external
https://github.com/protobufjs/protobuf.js/release… external
https://github.com/protobufjs/protobuf.js/release… external
https://github.com/protobufjs/protobuf.js/securit… external
https://access.redhat.com/security/cve/CVE-2026-59899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507482 external
https://www.cve.org/CVERecord?id=CVE-2026-59899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59899 external
https://github.com/netty/netty/security/advisorie… external
https://netty.io/news/2026/07/09/4-1-136-Final.html external
https://access.redhat.com/security/cve/CVE-2026-68494 self
https://bugzilla.redhat.com/show_bug.cgi?id=2511026 external
https://www.cve.org/CVERecord?id=CVE-2026-68494 external
https://nvd.nist.gov/vuln/detail/CVE-2026-68494 external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/commit/… external
https://github.com/FasterXML/jackson-core/pull/1611 external
https://github.com/FasterXML/jackson-core/securit… external
https://github.com/advisories/GHSA-72hv-8253-57qq external
https://www.cve.org/CVERecord?id=CVE-2026-18401 external
https://access.redhat.com/security/cve/CVE-2026-69152 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722 external
https://www.cve.org/CVERecord?id=CVE-2026-69152 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152 external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/c… external
https://github.com/juliangruber/brace-expansion/s… external
https://access.redhat.com/security/cve/CVE-2026-69192 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510801 external
https://www.cve.org/CVERecord?id=CVE-2026-69192 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69192 external
https://github.com/beaugunderson/ip-address/commi… external
https://github.com/beaugunderson/ip-address/relea… external
https://github.com/beaugunderson/ip-address/secur… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* Apache HttpComponents Core: Denial of Service via excessive HTTP headers (CVE-2026-54399)\n* Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks (CVE-2026-54428)\n* Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)\n* Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076)\n* SeaweedFS: Information disclosure via S3 API gateway path traversal (CVE-2026-55874)\n* SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway (CVE-2026-58372)\n* protobufjs: Denial of Service via crafted .proto schema (CVE-2026-59877)\n* Quarkus REST: Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)\n* Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833)\n* Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831)\n* Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851)\n* Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)\n* Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)\n* Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)\n* Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899)\n* Apache Thrift: Denial of Service via integer overflow or wraparound (CVE-2026-55969)\n* Apache Thrift: Denial of Service via improper handling of highly compressed data (CVE-2026-48586)\n* Apache Thrift: Denial of Service due to uncontrolled resource allocation (CVE-2026-45112)\n* brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVE-2026-69152)\n* ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192)\n* jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n* DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978)\n* OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178)\n* Go net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)\n* Go encoding/xml: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)\n* Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)\n* Go crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)\n* Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)\n* js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869)\n* golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions (CVE-2026-56854)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68333",
        "url": "https://access.redhat.com/errata/RHSA-2026:68333"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2484830",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
      },
      {
        "category": "external",
        "summary": "2495031",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495031"
      },
      {
        "category": "external",
        "summary": "2496101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496101"
      },
      {
        "category": "external",
        "summary": "2496106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496106"
      },
      {
        "category": "external",
        "summary": "2498092",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498092"
      },
      {
        "category": "external",
        "summary": "2498122",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
      },
      {
        "category": "external",
        "summary": "2498127",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498127"
      },
      {
        "category": "external",
        "summary": "2499914",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499914"
      },
      {
        "category": "external",
        "summary": "2499919",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499919"
      },
      {
        "category": "external",
        "summary": "2500695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
      },
      {
        "category": "external",
        "summary": "2503101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503101"
      },
      {
        "category": "external",
        "summary": "2503103",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503103"
      },
      {
        "category": "external",
        "summary": "2505422",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505422"
      },
      {
        "category": "external",
        "summary": "2505698",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505698"
      },
      {
        "category": "external",
        "summary": "2505911",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505911"
      },
      {
        "category": "external",
        "summary": "2505980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505980"
      },
      {
        "category": "external",
        "summary": "2506373",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506373"
      },
      {
        "category": "external",
        "summary": "2507433",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
      },
      {
        "category": "external",
        "summary": "2507434",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507434"
      },
      {
        "category": "external",
        "summary": "2507439",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507439"
      },
      {
        "category": "external",
        "summary": "2507482",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507482"
      },
      {
        "category": "external",
        "summary": "2510722",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
      },
      {
        "category": "external",
        "summary": "2510801",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510801"
      },
      {
        "category": "external",
        "summary": "2511026",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
      },
      {
        "category": "external",
        "summary": "2515815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
      },
      {
        "category": "external",
        "summary": "2515820",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
      },
      {
        "category": "external",
        "summary": "2515838",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
      },
      {
        "category": "external",
        "summary": "2515839",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
      },
      {
        "category": "external",
        "summary": "2515840",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
      },
      {
        "category": "external",
        "summary": "2525639",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525639"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68333.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
    "tracking": {
      "current_release_date": "2026-09-17T06:43:20+00:00",
      "generator": {
        "date": "2026-09-17T06:43:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:68333",
      "initial_release_date": "2026-09-16T17:16:26+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T17:16:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T17:16:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-17T06:43:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4 on RHEL 9",
                "product": {
                  "name": "Cryostat 4 on RHEL 9",
                  "product_id": "9Base-Cryostat-4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-22"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-22"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-14"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-22"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-14"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-12"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-22"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-14"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15075",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-07-14T09:01:12.413297+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499919"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in Eclipse Vert.x\u0027s `DefaultRedirectHandler` that affects Red Hat products utilizing `vertx-core` for HTTP client operations. The vulnerability allows sensitive request headers, such as authentication tokens and session cookies, to be forwarded to arbitrary external domains during HTTP 30x redirects. This could enable an attacker to capture credentials if they can induce a Vert.x HttpClient to redirect to a malicious server, potentially leading to unauthorized access.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15075"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499919",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499919"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15075",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15075"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075"
        },
        {
          "category": "external",
          "summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161",
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161"
        }
      ],
      "release_date": "2026-07-14T08:15:53.650000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure applications utilizing Vert.x HttpClient to strictly validate and restrict the URLs to which HTTP requests can be redirected. Implement allowlists for trusted domains and ensure that any user-supplied or external URLs processed by Vert.x HttpClient are thoroughly sanitized and validated to prevent redirection to attacker-controlled destinations. This may involve updating application-specific configurations or implementing custom URL validation logic. A service restart or reload may be required for changes to take effect.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects"
    },
    {
      "cve": "CVE-2026-15076",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-07-14T09:00:58.070373+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499914"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server\u0027s domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker\u0027s account on that service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in Eclipse Vert.x Web Client\u0027s `WebClientSession` component. The vulnerability arises from insufficient validation of the `Domain` attribute in `Set-Cookie` response headers, allowing a remote attacker to inject cookies scoped to arbitrary third-party domains. This could lead to sensitive data exposure and unauthorized access if a victim application subsequently sends requests to the targeted domain, presenting the attacker-controlled cookie. The impact is significant as it bypasses expected cross-domain security boundaries.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15076"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499914",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499914"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076"
        },
        {
          "category": "external",
          "summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162",
          "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162"
        }
      ],
      "release_date": "2026-07-14T08:09:12.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation"
    },
    {
      "cve": "CVE-2026-16308",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-23T09:57:24.306000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2506373"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine (JVM) heap memory, leading to an OutOfMemoryError. The primary consequence is a denial of service, causing the application to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in Quarkus REST / RESTEasy Reactive\u0027s MultipartParser, allowing an unauthenticated remote attacker to cause a denial of service. By sending a crafted multipart/form-data request with an excessively large part-header section, the attacker can exhaust the JVM heap, leading to application crashes. This vulnerability does not require valid form field names or authentication.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16308"
        },
        {
          "category": "external",
          "summary": "RHBZ#2506373",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506373"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16308",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16308"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16308",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16308"
        }
      ],
      "release_date": "2026-07-29T13:19:42.315000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-45112",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-27T12:01:28.483023+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507439"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or throttle resource allocation, leading to potential system instability or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. It stems from uncontrolled resource allocation in Apache Thrift Java bindings, which can lead to a denial of service. This impacts Red Hat products such as Red Hat OpenShift AI, Red Hat build of Apache Camel, Red Hat Ceph Storage, Red Hat Connectivity Link, and Cryostat, where services utilizing these vulnerable bindings could experience resource exhaustion and service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45112"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507439",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507439"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45112",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45112"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45112",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45112"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/34",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/34"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/hl9kmf1z2o3lxvspoj3g9ykl8lj9mdxc",
          "url": "https://lists.apache.org/thread/hl9kmf1z2o3lxvspoj3g9ykl8lj9mdxc"
        }
      ],
      "release_date": "2026-07-27T10:57:34.326000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation"
    },
    {
      "cve": "CVE-2026-48586",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-27T12:01:11.736259+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507434"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Apache Thrift\u0027s handling of highly compressed data can lead to a denial of service. Remote, unauthenticated attackers could exploit this flaw by sending specially crafted compressed data, causing excessive resource consumption and disrupting the availability of services utilizing vulnerable Thrift bindings in Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507434",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507434"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48586",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/37",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/37"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq",
          "url": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq"
        }
      ],
      "release_date": "2026-07-27T11:02:54.430000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data"
    },
    {
      "cve": "CVE-2026-49978",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-07-14T21:05:26.253019+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `\u003ctemplate\u003e.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        }
      ],
      "release_date": "2026-07-14T20:02:46.263000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
    },
    {
      "cve": "CVE-2026-54399",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-01T18:02:08.214968+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496101"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache HttpComponents Core. This uncontrolled resource consumption vulnerability in the HTTP/1.1 message parser allows a remote attacker to cause a denial of service through memory exhaustion. This can be triggered by sending messages with an excessive number of headers or excessive header length.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in Apache HttpComponents Core allows a remote attacker to cause a denial of service by sending HTTP/1.1 messages with an excessive number or length of headers. This can lead to memory exhaustion in applications using the affected HTTP/1.1 message parser, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54399"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496101",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496101"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54399",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54399"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54399",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54399"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/01/4",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/01/4"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy",
          "url": "https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy"
        }
      ],
      "release_date": "2026-07-01T17:02:21.778000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, configure an upstream proxy or web application firewall (WAF) to enforce limits on the number and length of HTTP headers. This prevents malformed requests from reaching and exhausting the vulnerable Apache HttpComponents Core component. Consult your proxy or WAF documentation for specific configuration. A service restart may be required for changes to take effect.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers"
    },
    {
      "cve": "CVE-2026-54428",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-01T18:02:25.195687+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system\u0027s configured header list size limit is applied. This can lead to the affected system becoming unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Apache HttpComponents Core. The HTTP/2 HPACK decoder is susceptible to memory exhaustion when processing oversized compressed header blocks from a remote attacker. This occurs before the system\u0027s configured header list size limits are applied, potentially rendering affected Red Hat products unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54428"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54428",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54428"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54428",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54428"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/01/3",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/01/3"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd",
          "url": "https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd"
        }
      ],
      "release_date": "2026-07-01T17:03:53.938000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks"
    },
    {
      "cve": "CVE-2026-55831",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-21T00:02:57.305291+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503103"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in Netty\u0027s SPDY SETTINGS decoder, allowing a remote unauthenticated attacker to exhaust system resources. By sending a specially crafted SPDY/3.1 SETTINGS frame, an attacker can cause excessive memory allocation and CPU usage, leading to a denial of service. This vulnerability has a low attack complexity and requires no user interaction or privileges.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503103",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503103"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
          "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
          "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w"
        }
      ],
      "release_date": "2026-07-20T23:00:31.859000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing"
    },
    {
      "cve": "CVE-2026-55833",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-21T00:01:25.203265+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503101"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY header decoding. A remote, unauthenticated attacker can send a small, compressed SPDY header block that, during decompression, expands significantly beyond configured limits. This leads to excessive CPU and memory consumption, potentially causing resource exhaustion and service unavailability in affected Red Hat products that utilize Netty with SPDY.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55833"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503101",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503101"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55833",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55833"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
          "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
          "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c"
        }
      ],
      "release_date": "2026-07-20T23:18:07.893000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification"
    },
    {
      "cve": "CVE-2026-55851",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-21T22:43:00.311516+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2505698"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a denial of service (DoS) due to memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service vulnerability in the Netty `codec-haproxy` module. A remote attacker can send a specially crafted PROXY protocol v2 message, causing unbounded memory accumulation and exhausting direct memory, leading to service unavailability. This impact is significant for applications that process PROXY protocol v2 messages using the affected Netty component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2505698",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505698"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55851"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
          "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
          "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-q6cq-mhr2-jmr5",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-q6cq-mhr2-jmr5"
        }
      ],
      "release_date": "2026-07-21T21:22:34.879000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message"
    },
    {
      "cve": "CVE-2026-55874",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-08T15:02:44.110862+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498092"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in SeaweedFS, a distributed storage system. The S3 API gateway in SeaweedFS does not properly validate `X-Amz-Copy-Source` headers, specifically failing to reject \"dot-dot\" path segments. This allows an authenticated user, even if scoped to a single bucket, to read objects from other buckets through server-side copy operations. The vulnerability results in unauthorized information disclosure across storage buckets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "SeaweedFS: github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via S3 API gateway path traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in SeaweedFS allows an authenticated attacker to bypass intended access controls within the S3 API gateway. By crafting a malicious `X-Amz-Copy-Source` header with \"dot-dot\" path segments, an attacker with limited bucket access can read objects from other unauthorized buckets. This could lead to unauthorized information disclosure in Red Hat Cryostat deployments utilizing SeaweedFS for storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55874"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498092",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498092"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55874",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55874"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55874",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55874"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/commit/b44cf51fe931bd75aa4d37ae766bea90d7f85ccd",
          "url": "https://github.com/seaweedfs/seaweedfs/commit/b44cf51fe931bd75aa4d37ae766bea90d7f85ccd"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/pull/9929",
          "url": "https://github.com/seaweedfs/seaweedfs/pull/9929"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/releases/tag/4.34",
          "url": "https://github.com/seaweedfs/seaweedfs/releases/tag/4.34"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-56wq-x3wv-3ff4",
          "url": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-56wq-x3wv-3ff4"
        }
      ],
      "release_date": "2026-07-08T14:43:40.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "SeaweedFS: github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via S3 API gateway path traversal"
    },
    {
      "cve": "CVE-2026-55969",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-27T12:01:08.265881+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
          "url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
        }
      ],
      "release_date": "2026-07-27T11:07:53.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
    },
    {
      "cve": "CVE-2026-56745",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-07-21T22:52:47.296001+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2505911"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty\u0027s SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY-to-HTTP codec, affecting Red Hat products that utilize vulnerable versions of Netty. A remote, unauthenticated attacker can exploit a memory leak in the `SpdyHttpDecoder` by sending specially crafted `SYN_STREAM` frames, leading to native memory exhaustion and a denial of service for the affected system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56745"
        },
        {
          "category": "external",
          "summary": "RHBZ#2505911",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505911"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
          "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
          "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq"
        }
      ],
      "release_date": "2026-07-21T21:31:25.307000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec"
    },
    {
      "cve": "CVE-2026-56746",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-21T22:30:30.983812+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2505422"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat ships Netty\u0027s netty-codec-http component in multiple products. The CorsHandler shortCircuit() feature, when enabled, is intended to reject unauthorized cross-origin requests before they reach the application. Due to a logical operator error in origin validation, requests with a null Origin header bypass this protection entirely. Upgrade to Netty 4.1.136.Final or 4.2.16.Final to resolve this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56746"
        },
        {
          "category": "external",
          "summary": "RHBZ#2505422",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505422"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56746",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56746"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5"
        }
      ],
      "release_date": "2026-07-21T21:36:18.627000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "If CORS short-circuit functionality is not required, disable the shortCircuit() configuration in the CorsHandler. Alternatively, implement application-level origin validation to reject requests with null Origin headers. A web application firewall (WAF) can also be configured to block requests with null or missing Origin headers.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header"
    },
    {
      "cve": "CVE-2026-56819",
      "cwe": {
        "id": "CWE-911",
        "name": "Improper Update of Reference Count"
      },
      "discovery_date": "2026-07-21T23:03:36.448652+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2505980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Netty\u0027s HTTP/2 codec, which could lead to a denial of service. Red Hat products utilizing netty-codec-http2 with HTTP/2 content decompression enabled are susceptible to memory exhaustion when processing specially crafted HTTP/2 DATA frames. This allows a remote attacker to leak memory buffers, eventually exhausting available memory and impacting system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2505980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
          "url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
          "url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972"
        }
      ],
      "release_date": "2026-07-21T22:11:17.470000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak"
    },
    {
      "cve": "CVE-2026-56854",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-08-28T15:33:34.404578+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525639"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability severity is Important due to the requirement that an attacker already have a valid private key. A flaw in golang.org/x/crypto/ssh allows remote attackers to bypass source-address restrictions for certain authentication methods. This would allow an attacker to use a valid key for gaining additional privileges outside of the bounds of the network-based access controls.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525639",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525639"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56854",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/797040",
          "url": "https://go.dev/cl/797040"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80213",
          "url": "https://go.dev/issue/80213"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6303",
          "url": "https://pkg.go.dev/vuln/GO-2026-6303"
        }
      ],
      "release_date": "2026-08-28T15:14:26.918000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-58372",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-06-30T17:01:35.444287+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495031"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in SeaweedFS. An authenticated remote attacker with write access to a single bucket could exploit a path traversal vulnerability in the S3 gateway. By crafting a DeleteObjects XML request body with specific object keys containing directory traversal sequences, the attacker could bypass authorization controls. This allows the attacker to delete arbitrary objects in other tenants\u0027 buckets, leading to unauthorized data deletion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/seaweedfs/seaweedfs: SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "SeaweedFS is affected by a path traversal vulnerability in the S3 gateway\u0027s DeleteMultipleObjectsHandler, where ../ sequences in the object keys of a DeleteObjects request body allow an authenticated client to delete objects outside its authorized bucket scope. Red Hat build of Cryostat 4 bundles SeaweedFS as its storage component (cryostat-storage) and is affected. Exploitation requires a valid S3 principal with write access in a multi-tenant deployment; Cryostat\u0027s single-tenant use of the storage backend substantially limits practical exposure. Red Hat rates the impact of this flaw as Important. This is fixed in SeaweedFS 4.34.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58372"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495031",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495031"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58372",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58372"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58372",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58372"
        },
        {
          "category": "external",
          "summary": "https://github.com/geo-chen/oss/blob/main/seaweedfs.md",
          "url": "https://github.com/geo-chen/oss/blob/main/seaweedfs.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/commit/0345658ea8e7c6a3948ad190634b00866ec244c9",
          "url": "https://github.com/seaweedfs/seaweedfs/commit/0345658ea8e7c6a3948ad190634b00866ec244c9"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/pull/9931",
          "url": "https://github.com/seaweedfs/seaweedfs/pull/9931"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/releases/tag/4.34",
          "url": "https://github.com/seaweedfs/seaweedfs/releases/tag/4.34"
        },
        {
          "category": "external",
          "summary": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv",
          "url": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/seaweedfs-cross-bucket-object-deletion-via-deleteobjects-request-body-keys",
          "url": "https://www.vulncheck.com/advisories/seaweedfs-cross-bucket-object-deletion-via-deleteobjects-request-body-keys"
        }
      ],
      "release_date": "2026-06-30T15:57:59.372000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the criteria for vulnerability selection or Red Hat Product Security recommendation. Restricting S3 write access to trusted principals reduces the risk of exploitation.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/seaweedfs/seaweedfs: SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway"
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    },
    {
      "cve": "CVE-2026-59877",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-08T16:01:54.459482+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498127"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library\u0027s parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "protobufjs: protobufjs: Denial of Service via crafted .proto schema",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The `protobufjs` library, used in Red Hat products, is susceptible to a Denial of Service when processing a specially crafted `.proto` schema. A remote attacker can exploit this by providing a malformed schema, causing an infinite loop during parsing and leading to service unavailability. This is considered Important due to the potential for significant disruption to services that handle external protobuf definitions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59877"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498127",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498127"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59877",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59877"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59877",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59877"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217",
          "url": "https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69f",
          "url": "https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69f"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/pull/2352",
          "url": "https://github.com/protobufjs/protobuf.js/pull/2352"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5",
          "url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6",
          "url": "https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6"
        },
        {
          "category": "external",
          "summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccww",
          "url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccww"
        }
      ],
      "release_date": "2026-07-08T15:28:07.696000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Applications that only encode or decode protobuf messages using trusted schemas are not directly affected. Until patched protobufjs packages (7.6.5 / 8.6.6) are available, do not parse .proto schema text from untrusted sources via parse, Root.load, or Root.loadSync. Where untrusted schema input cannot be avoided, isolate .proto parsing in a dedicated worker thread or subprocess and enforce an explicit timeout so a non-returning parse cannot block the main event loop. Optional process-manager controls (for example systemd restart-on-failure, or CPU/cgroup limits) may reduce host-level impact or aid recovery for supervised services, but they do not fix the parser bug and are not a substitute for input isolation or applying the update.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "protobufjs: protobufjs: Denial of Service via crafted .proto schema"
    },
    {
      "cve": "CVE-2026-59899",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-09T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507482"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Netty\u0027s HTTP decoder, which could lead to a denial of service. Red Hat products utilizing `netty-codec-http` are susceptible to memory exhaustion when processing specially crafted, highly compressed HTTP payloads. This allows a remote attacker to trigger excessive memory allocation, impacting system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507482",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507482"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2026/07/09/4-1-136-Final.html",
          "url": "https://netty.io/news/2026/07/09/4-1-136-Final.html"
        }
      ],
      "release_date": "2026-07-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)"
    },
    {
      "cve": "CVE-2026-68494",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-04T15:01:53.631865+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
          "url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
          "url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
          "url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/pull/1611",
          "url": "https://github.com/FasterXML/jackson-core/pull/1611"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
          "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
          "url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
        }
      ],
      "release_date": "2026-08-04T14:39:14.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
    },
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-69192",
      "cwe": {
        "id": "CWE-1389",
        "name": "Incorrect Parsing of Numbers with Different Radices"
      },
      "discovery_date": "2026-08-03T21:02:17.374935+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510801"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the `ip-address` JavaScript library can lead to Server-Side Request Forgery (SSRF) and trust-boundary bypass. The library\u0027s inconsistent parsing of IP address octets with leading zeros, which it interprets as decimal while the network stack interprets them as octal, can cause applications to misclassify internal IP addresses as external. This discrepancy can bypass security filters designed to prevent access to internal resources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
        ],
        "known_not_affected": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510801",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510801"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69192",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e",
          "url": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1",
          "url": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr",
          "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr"
        }
      ],
      "release_date": "2026-08-03T19:56:13.640000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T17:16:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68333"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:bc47200b2bb00c9cb4f4ae4929d0faca3b7685ba160bafe07f773e8cfe977b6e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:fd21840bc7fd04a3387186e8eadf3c1772b71c3a68d90c6f8f157de0c1e51826_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:0bcd6d1e5fd1dc893c83641c96ebcdaf27fd576cd150d7c53a79ec99cd0581be_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a1c62ba6ab13ab0b429552304050235f5d85870de0d5733bf4bf9240661e769d_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:8d67c1c76672ecb9241469355656c751bd8b54c138d6fb16866d604bb6da95ed_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:a236a3646adf4c5b467e630cdd7b8ae4b5d874dc6342fcac1e5290c2beac0d06_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:11bda199b4124dd05b55b07b4d7508b1029371ad650afc3bba12b486011c6b26_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:a1c2dfa85f82dd2bd96853270cd46de8dcffe4f6f81e7646eeb032843884ff94_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:01b7df9a63ddcffaca5f4594da01b1d0cb03fb4c0db8061266a67f027a67393b_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:1ff5e21e25d3c96ed212689f2b368b20a935f0669af31c37a1ae90cdf6be9d9e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:09183b020f24f1b478b3391109f5b42aa066f9df71febec4c642621f82d3a304_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:56942fe083a729c20c316899678a9b8bcb53d7cd0166bf1d026e71e7d69aee86_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:5091ea57743ec205834299edc38fc4bd011c7eb735bda422dc751a5084bb43af_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a6932f33459645777f557163dd24c2d7dfd11bda6020d7dc144c65eda80a178e_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:1bbd4a394a3ebcff86b518ec7a7d242088913052873b73cc2d7e09ed1b181c80_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:4d1c6cfbce9d2a106ff1d14681fdc51d00b203f057d66e5023067b04d3429d20_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:5be66a00286e1733b91ea407788843a4123ff8bdcb830ec031bcd41b1e337255_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:66f8afe0cebac9600554636ec0493a15634e6af6e94875b65bbdfb39ae92b4b3_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:23ea9da4ea97cdd04d95b500fbca8edd7db908fec16043ae1fa336634ffcd1fb_arm64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2663c6efa60f097f5b0be4a15f58bf1645b3313d1ebab6c19c42b8e6cc3e234a_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.