Vulnerability-Lookup

RHSA-2026:8568

Vulnerability from csaf_redhat - Published: 2026-04-16 19:35 - Updated: 2026-04-17 01:45

Summary

Red Hat Security Advisory: New container image: rhceph-9.0

Severity

Moderate

Notes

Topic: A new version of Red Hat build of Ceph Storage has been released

Details: The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 9.0. This release updates to the latest version.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-11831

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Vendor Fix The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. https://access.redhat.com/errata/RHSA-2026:8568

Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVE-2025-59436

A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.

3.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

References

URL

Category

	https://access.redhat.com/errata/RHSA-2026:8568	self
	https://access.redhat.com/security/cve/CVE-2024-11831	external
	https://access.redhat.com/security/cve/CVE-2025-59436	external
	https://access.redhat.com/security/updates/classi…	external
	https://docs.redhat.com/en/documentation/red_hat_…	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2024-11831	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2312579	external
	https://www.cve.org/CVERecord?id=CVE-2024-11831	external
	https://nvd.nist.gov/vuln/detail/CVE-2024-11831	external
	https://github.com/yahoo/serialize-javascript/com…	external
	https://github.com/yahoo/serialize-javascript/pull/173	external
	https://access.redhat.com/security/cve/CVE-2025-59436	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2395629	external
	https://www.cve.org/CVERecord?id=CVE-2025-59436	external
	https://nvd.nist.gov/vuln/detail/CVE-2025-59436	external
	https://cosmosofcyberspace.github.io/CVE-Applicat…	external
	https://github.com/indutny/node-ip/issues/160	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 9.0.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:8568",
        "url": "https://access.redhat.com/errata/RHSA-2026:8568"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-11831",
        "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59436",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8568.json"
      }
    ],
    "title": "Red Hat Security Advisory: New container image: rhceph-9.0",
    "tracking": {
      "current_release_date": "2026-04-17T01:45:35+00:00",
      "generator": {
        "date": "2026-04-17T01:45:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2026:8568",
      "initial_release_date": "2026-04-16T19:35:56+00:00",
      "revision_history": [
        {
          "date": "2026-04-16T19:35:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-16T19:36:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-17T01:45:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 9",
                "product": {
                  "name": "Red Hat Ceph Storage 9",
                  "product_id": "Red Hat Ceph Storage 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:9.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3A9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952981"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3Ada17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952760"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Ab43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774953358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774956924"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3A56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1776359884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3A471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455?arch=amd64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952669"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3Aee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952981"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3A96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952760"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Af12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774953358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3Ab43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774956924"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3A72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1776359884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3Acbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b?arch=arm64\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952669"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3A4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952981"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3A6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952760"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774953358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3Ae30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774956924"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3Ada210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1776359884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3A9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952669"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3Aff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952981"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3A9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952760"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952585"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3Ab8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774953358"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774956924"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3A3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1776359884"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3A0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b?arch=s390x\u0026repository_url=registry.redhat.io/rhceph\u0026tag=1774952669"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64 as a component of Red Hat Ceph Storage 9",
          "product_id": "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-11831",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2024-09-16T16:43:32.021000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2312579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2312579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-11831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e",
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/pull/173",
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "release_date": "2024-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-16T19:35:56+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:8568"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript"
    },
    {
      "cve": "CVE-2025-59436",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2025-09-16T03:00:42.722078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2395629"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip: Node ip SSRF",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
          "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "RHBZ#2395629",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395629"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59436",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html",
          "url": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/indutny/node-ip/issues/160",
          "url": "https://github.com/indutny/node-ip/issues/160"
        }
      ],
      "release_date": "2025-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-16T19:35:56+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:8568"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:4366f9651eca1f50648c504b6e246b549ef5a8f9f8fe9e08c33f2ac1f55bbcd3_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:9ba3f19803f74c69368128cfd4e0e43af6cbc09b21f3b5a4ba8fc0e6c71436ca_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ee7917bc52e253668ca8f98a99d2830f3a1710a171db357d57d5c25548e3a3a3_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/alloy-rhel10@sha256:ff38d4d0d88031551d02973104919daa73b21e6e0a12deeb95189b3f553d22be_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:6af2c453b93a9a9c28ce9734953d9fc672a2808d5424a09d64f1a52a2d20f7c9_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:96bba5b3071c3a71e1f7398ec84dbc5dc8c1758196b6286b7e11b25b9f4321ca_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:9f015fb781ee69d1fbc149d35aae8e51a08e3e468a4393d3e0b0651d339573de_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/grafana-rhel10@sha256:da17bd5ab859e7442c8a829956f68c7a205a8e5e36084c3d6aecc45d06b975c3_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:1f60d13e74fbcf7f789408009782f56dca29ece0a777a91a0eddf5d46a73afd6_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:33a71ea383d9399df5d30a57471b6a341b95112d15fde6130f2c66cea51c1726_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:66c6b4a96455e39ba3d60acac77a647dce6011fa4bf40ea267717c7c22bacef7_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/keepalived-rhel10@sha256:b8f13f053ebbccec1b1bd4d5ff0c56fd1b5953ad4b4d7735233ffd53871e28ca_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:7e289546927c00a64e7ff37e31185652faf756d1351177ab1964bad44fddc46e_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:83a19d8fa072846633479aeca73e107a35a86f20cf48847e8d269b0996393dee_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:b43dda822d5a14dc16d6965b6f05d7addea685428ea7b603ce6109ffc44601d2_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:e30d2e15ca36ccddc3dea047b2bafefa5f3f7aec4324203e978edf96d5c733c8_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:56f80547b0340a58b73ebb3e48ac820d1b6684c8e2d143e42b9ab7feccf85cc5_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:72dab31654b6d2f73c55c05e8ec3019c762be234e0c0d6c9bef55eee1ddad732_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:da210e242bdb00ce8baa8ec15054906a93634e0c394c96cab6e30d6de8b295e4_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3fd730ff243bf512e7b60d52ccb067e1122285f2115ef5ea0e83429bca6bac53_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:50235899d833248a7154f233cca76b18caebdf7c872647490cdc2158f2c24bba_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:b43158c9fc91fe5fd9b3236df4c3a688de38c8ce086b192baec665688866c3b2_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f12fc5ecee778013d30055fa92700d3edc5f0cff24146427ab0734b46df11c68_arm64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:0d09b10eef03c3984f57818fd072b97f80e7b88bba482fd988c54c5e23a7f05b_s390x",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:471394f278cbeb76edc6880da443c03aa2e97ee6a4278a96eab862cde4f92455_amd64",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:9846f5a7cbdeb85432963952b53caa485e43ae1ff4ab9e84221d23c7b3792ac6_ppc64le",
            "Red Hat Ceph Storage 9:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:cbced9624551197940b866ee05bfd8cf3d5dfacd13707bd33913cd08ec689d8b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ip: Node ip SSRF"
    }
  ]
}

CVE-2025-59436 (GCVE-0-2025-59436)

Vulnerability from cvelistv5 – Published: 2025-09-16 00:00 – Updated: 2025-09-16 19:13

Summary

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.

Severity ?

3.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

mitre

References

URL

	Vendor	Product	Version
	fedorindutny	ip	Affected: 0 , ≤ 2.0.1 (semver)

CVE-2024-11831 (GCVE-0-2024-11831)

Vulnerability from cvelistv5 – Published: 2025-02-10 15:27 – Updated: 2026-04-17 01:39

Title

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Summary

Severity ?

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/errata/RHBA-2025:0304	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:0381	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:10853	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1334	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1468	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:21068	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:21203	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:3870	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:4511	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8059	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8078	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8233	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8479	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8512	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8544	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:8551	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:9294	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:1536	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:2769	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2026:8568	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-11831	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2312579	issue-trackingx_refsource_REDHAT
	https://github.com/yahoo/serialize-javascript/com…
	https://github.com/yahoo/serialize-javascript/pull/173

Impacted products

Vendor

Product

Version

Affected: 6.0 , < 6.0.2 (semver)

Red Hat	Red Hat Advanced Cluster Security 4.4	Unaffected: 4.4.8-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.4::el8
Red Hat	Red Hat Advanced Cluster Security 4.5	Unaffected: 4.5.6-2 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.5::el8
Red Hat	Red Hat Ceph Storage 7.1	Unaffected: 2:18.2.1-381.el8cp , < * (rpm) cpe:/a:redhat:ceph_storage:7.1::el9 cpe:/a:redhat:ceph_storage:7.1::el8
Red Hat	Red Hat Ceph Storage 8.1	Unaffected: 2:19.2.1-292.el9cp , < * (rpm) cpe:/a:redhat:ceph_storage:8.1::el9
Red Hat	Red Hat Ceph Storage 9.0	Unaffected: 2:20.1.0-144.el10cp , < * (rpm) cpe:/a:redhat:ceph_storage:9.0::el10 cpe:/a:redhat:ceph_storage:9.0::el9
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:8.0.112-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:8.0.112-1.el9_5 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-3 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.14-RHEL-9	Unaffected: v4.14.18-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.14::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.15-RHEL-9	Unaffected: v4.15.14-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.15::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-4 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-4 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.16-RHEL-9	Unaffected: v4.16.10-3 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.16::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.17-RHEL-9	Unaffected: v4.17.7-2 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.17::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-8 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-7 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	RHODF-4.18-RHEL-9	Unaffected: v4.18.2-8 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Ceph Storage 8	Unaffected: sha256:5a97e827c48732775a76e2fe25860488e773f4d8da0e0fbc51168fe30a5deb4b , < * (rpm) cpe:/a:redhat:ceph_storage:8::el9
Red Hat	Red Hat Ceph Storage 9	Unaffected: sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335 , < * (rpm) cpe:/a:redhat:ceph_storage:9.0::el9
Red Hat	Red Hat OpenShift Pipelines 1.14.6	Unaffected: sha256:84f36fbadbbbbaa4a174850994a6bfb1ffb8f2c671f9dee83037a756c3a3cd95 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.14::el8
Red Hat	Red Hat OpenShift Pipelines 1.15	Unaffected: sha256:3b11a142e5018e047c185199f157089d47e86f470e9ada73d0c36cd84ae2f020 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.15::el8
Red Hat	Red Hat OpenShift Pipelines 1.15	Unaffected: sha256:43fbd1ff1fcab53e5d4fde5daafa46795b3f2b1e14c07cc2e565b624aa8468c7 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.15::el8
Red Hat	Red Hat OpenShift Pipelines 1.16	Unaffected: sha256:15b283d200e626cc945bd5bfb71b883948e07ed70e97fd4da5dc678aae183808 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.16::el8
Red Hat	Red Hat OpenShift Pipelines 1.16	Unaffected: sha256:3fc1b957039ba40b8d5353cd624b930f2bc5c5cb47335f7eb3255a8d792a3060 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.16::el8
Red Hat	Red Hat OpenShift Pipelines 1.17	Unaffected: sha256:43f914efbabff71cd7f5dad186b461fd87a28846b33f8c8b3d2ad38fece95983 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.17::el8
Red Hat	Red Hat OpenShift Pipelines 1.17	Unaffected: sha256:31ed62e58c9d12bff8cd88a881eda9b5e68d8d416227d191228dd0d3b4af532c , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.17::el8
Red Hat	Red Hat OpenShift Pipelines 1.18.0	Unaffected: sha256:7a71e590bb448f9f6c9f1e8f8ad0396770cc015e22358d5f7b022f79f2ff01e2 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.18::el9
Red Hat	Red Hat OpenShift Pipelines 1.19	Unaffected: sha256:31eeeab213a1b603ab8c3f8253cd19c87bb45ca03e96e0461314571a7de82828 , < * (rpm) cpe:/a:redhat:openshift_pipelines:1.19::el9
Red Hat	Cryostat 3	cpe:/a:redhat:cryostat:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Migration Toolkit for Virtualization	cpe:/a:redhat:migration_toolkit_virtualization:2
Red Hat	.NET 6.0 on Red Hat Enterprise Linux	cpe:/a:redhat:rhel_dotnet:6.0
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat build of OptaPlanner 8	cpe:/a:redhat:optaplanner:::el6
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Discovery 1	cpe:/a:redhat:discovery:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat Integration Camel K 1	cpe:/a:redhat:integration:1
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 3.11	cpe:/a:redhat:openshift:3.11
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat Process Automation 7	cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:1

Date Public ?

2024-09-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-11831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T17:08:31.160473Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-10T17:08:44.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/yahoo/serialize-javascript",
          "packageName": "serialize-javascript",
          "versions": [
            {
              "lessThan": "6.0.2",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.4::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.4.8-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "advanced-cluster-security/rhacs-main-rhel8",
          "product": "Red Hat Advanced Cluster Security 4.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.5.6-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7.1::el9",
            "cpe:/a:redhat:ceph_storage:7.1::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:18.2.1-381.el8cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8.1::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 8.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:19.2.1-292.el9cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9.0::el10",
            "cpe:/a:redhat:ceph_storage:9.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ceph",
          "product": "Red Hat Ceph Storage 9.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2:20.1.0-144.el10cp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0.112-1.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0.112-1.el9_5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.14-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.14.18-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.15-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.15.14-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.16-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.16.10-3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.17-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.17.7-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/ocs-client-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "odf4/odf-multicluster-console-rhel9",
          "product": "RHODF-4.18-RHEL-9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v4.18.2-8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-8-rhel9",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:5a97e827c48732775a76e2fe25860488e773f4d8da0e0fbc51168fe30a5deb4b",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-9-rhel9",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:3e0b13addd3593d8802f1d55e878bb467e5c83e1ffd76999b006107b5cb3d335",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.14::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.14.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:84f36fbadbbbbaa4a174850994a6bfb1ffb8f2c671f9dee83037a756c3a3cd95",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:3b11a142e5018e047c185199f157089d47e86f470e9ada73d0c36cd84ae2f020",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.15::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:43fbd1ff1fcab53e5d4fde5daafa46795b3f2b1e14c07cc2e565b624aa8468c7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.16::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:15b283d200e626cc945bd5bfb71b883948e07ed70e97fd4da5dc678aae183808",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.16::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:3fc1b957039ba40b8d5353cd624b930f2bc5c5cb47335f7eb3255a8d792a3060",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.17::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:43f914efbabff71cd7f5dad186b461fd87a28846b33f8c8b3d2ad38fece95983",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.17::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "Red Hat OpenShift Pipelines 1.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:31ed62e58c9d12bff8cd88a881eda9b5e68d8d416227d191228dd0d3b4af532c",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
          "product": "Red Hat OpenShift Pipelines 1.18.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:7a71e590bb448f9f6c9f1e8f8ad0396770cc015e22358d5f7b022f79f2ff01e2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
          "product": "Red Hat OpenShift Pipelines 1.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:31eeeab213a1b603ab8c3f8253cd19c87bb45ca03e96e0461314571a7de82828",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:cryostat:3"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Cryostat 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:logging:5"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-logging/kibana6-rhel8",
          "product": "Logging Subsystem for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:migration_toolkit_virtualization:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
          "product": "Migration Toolkit for Virtualization",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_dotnet:6.0"
          ],
          "defaultStatus": "unknown",
          "packageName": "rh-dotnet60-dotnet",
          "product": ".NET 6.0 on Red Hat Enterprise Linux",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_lightspeed"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-lightspeed-beta/lightspeed-console-plugin-rhel9",
          "product": "OpenShift Lightspeed",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-api-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:serverless:1"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "OpenShift Serverless",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_mesh:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
          "product": "OpenShift Service Mesh 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_mesh:2"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift-service-mesh/kiali-rhel8",
          "product": "OpenShift Service Mesh 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:red_hat_3scale_amp:2"
          ],
          "defaultStatus": "affected",
          "packageName": "3scale-amp-system-container",
          "product": "Red Hat 3scale API Management Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhacm2/console-rhel8",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "aap-cloud-ui-container",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/lightspeed-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-eda-controller",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:apache_camel_hawtio:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of Apache Camel - HawtIO 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:service_registry:2"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of Apicurio Registry 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:optaplanner:::el6"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat build of OptaPlanner 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grafana",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "affected",
          "packageName": "libarrow",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "grafana",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8"
          ],
          "defaultStatus": "affected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9"
          ],
          "defaultStatus": "affected",
          "packageName": "libarrow",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:9"
          ],
          "defaultStatus": "affected",
          "packageName": "pybind",
          "product": "Red Hat Ceph Storage 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_data_grid:8"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Data Grid 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhdh:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhdh/rhdh-hub-rhel9",
          "product": "Red Hat Developer Hub",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:1"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery-server-container",
          "product": "Red Hat Discovery 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "unaffected",
          "packageName": "dotnet8.0",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "dotnet6.0",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "grafana",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pcs",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unknown",
          "packageName": "dotnet6.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unknown",
          "packageName": "dotnet7.0",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "pcs",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_fuse:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Fuse 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:integration:1"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Integration Camel K 1",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_application_platform:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "cpes": [
            "cpe:/a:redhat:jbosseapxp"
          ],
          "defaultStatus": "unaffected",
          "packageName": "serialize-javascript",
          "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-dashboard-container",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-dashboard-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-data-science-pipelines-argo-argoexec-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-data-science-pipelines-argo-workflowcontroller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-kf-notebook-controller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-api-server-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-driver-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-launcher-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-persistenceagent-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-ml-pipelines-scheduledworkflow-v2-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "packageName": "odh-model-registry-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-notebook-controller-rhel8",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "unaffected",
          "packageName": "odh-operator-container",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:3.11"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift3/ose-console",
          "product": "Red Hat OpenShift Container Platform 3.11",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unaffected",
          "packageName": "openshift4/ose-monitoring-plugin-rhel9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/code-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/dashboard-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3"
          ],
          "defaultStatus": "affected",
          "packageName": "devspaces/traefik-rhel8",
          "product": "Red Hat OpenShift Dev Spaces",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-agent-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-all-in-one-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-collector-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-es-index-cleaner-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-es-rollover-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "unaffected",
          "packageName": "rhosdt/jaeger-ingester-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/jaeger-query-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Process Automation 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "affected",
          "packageName": "quay/quay-rhel8",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "nodejs-compression-webpack-plugin",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "unaffected",
          "packageName": "nodejs-webpack",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:red_hat_single_sign_on:7"
          ],
          "defaultStatus": "affected",
          "packageName": "serialize-javascript",
          "product": "Red Hat Single Sign-On 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:trusted_profile_analyzer:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
          "product": "Red Hat Trusted Profile Analyzer",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-09-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-17T01:39:58.613Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHBA-2025:0304",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHBA-2025:0304"
        },
        {
          "name": "RHSA-2025:0381",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:0381"
        },
        {
          "name": "RHSA-2025:10853",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:10853"
        },
        {
          "name": "RHSA-2025:1334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:1334"
        },
        {
          "name": "RHSA-2025:1468",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:1468"
        },
        {
          "name": "RHSA-2025:21068",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21068"
        },
        {
          "name": "RHSA-2025:21203",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21203"
        },
        {
          "name": "RHSA-2025:3870",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:3870"
        },
        {
          "name": "RHSA-2025:4511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:4511"
        },
        {
          "name": "RHSA-2025:8059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8059"
        },
        {
          "name": "RHSA-2025:8078",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8078"
        },
        {
          "name": "RHSA-2025:8233",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8233"
        },
        {
          "name": "RHSA-2025:8479",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8479"
        },
        {
          "name": "RHSA-2025:8512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8512"
        },
        {
          "name": "RHSA-2025:8544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8544"
        },
        {
          "name": "RHSA-2025:8551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:8551"
        },
        {
          "name": "RHSA-2025:9294",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:9294"
        },
        {
          "name": "RHSA-2026:1536",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:1536"
        },
        {
          "name": "RHSA-2026:2769",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:2769"
        },
        {
          "name": "RHSA-2026:8568",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:8568"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "name": "RHBZ#2312579",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-09-16T16:43:32.021Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-09-16T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-11831",
    "datePublished": "2025-02-10T15:27:46.732Z",
    "dateReserved": "2024-11-26T18:56:38.187Z",
    "dateUpdated": "2026-04-17T01:39:58.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:8568

CVE-2025-59436 (GCVE-0-2025-59436)

CVE-2024-11831 (GCVE-0-2024-11831)

Tags

Sightings

Nomenclature