{"id":"CVE-2026-42154","state":"PUBLISHED","title":"Prometheus: remote read endpoint allows denial of service via crafted snappy payload","description":"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3.","publishedAt":"2026-05-04T18:13:12.340Z","updatedAt":"2026-09-10T12:04:54.339Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"GitHub_M"},"assigner":"GitHub_M","products":["prometheus prometheus"],"affected":[{"vendor":"prometheus","product":"prometheus","versions":[{"version":"< 3.5.3","status":"affected"},{"version":">= 3.6.0, < 3.11.3","status":"affected"}]}],"references":["https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm","https://github.com/prometheus/prometheus/pull/18584","https://github.com/prometheus/prometheus/pull/18585","https://github.com/prometheus/prometheus/releases/tag/v3.11.3","https://github.com/prometheus/prometheus/releases/tag/v3.5.3","https://access.redhat.com/security/cve/CVE-2026-42154","https://bugzilla.redhat.com/show_bug.cgi?id=2466505","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42154.json","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:53413","https://access.redhat.com/errata/RHSA-2026:34357","https://access.redhat.com/errata/RHSA-2026:53412","https://access.redhat.com/errata/RHSA-2026:53415","https://access.redhat.com/errata/RHSA-2026:34359","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:41030","https://access.redhat.com/errata/RHSA-2026:44622","https://access.redhat.com/errata/RHSA-2026:47149","https://access.redhat.com/errata/RHSA-2026:53530","https://access.redhat.com/errata/RHSA-2026:54288","https://access.redhat.com/errata/RHSA-2026:30651","https://access.redhat.com/errata/RHSA-2026:60386","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:25039","https://access.redhat.com/errata/RHSA-2026:29770","https://access.redhat.com/errata/RHSA-2026:25245","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:56789","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:50758","https://access.redhat.com/errata/RHSA-2026:47728","https://access.redhat.com/errata/RHSA-2026:48699","https://access.redhat.com/errata/RHSA-2026:44235","https://access.redhat.com/errata/RHSA-2026:44263","https://access.redhat.com/errata/RHSA-2026:40792","https://access.redhat.com/errata/RHSA-2026:34794","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40974","https://access.redhat.com/errata/RHSA-2026:40970","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:42852"],"weaknesses":["CWE-400","CWE-789","CWE-770"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/42xxx/CVE-2026-42154.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-42154","state":"PUBLISHED","datePublished":"2026-05-04T18:13:12.340Z","dateUpdated":"2026-09-10T12:04:54.339Z","assignerShortName":"GitHub_M","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateReserved":"2026-04-24T17:15:21.835Z"},"containers":{"cna":{"title":"Prometheus: remote read endpoint allows denial of service via crafted snappy payload","descriptions":[{"lang":"en","value":"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a small payload that causes a huge heap allocation per request. Under concurrent load this can exhaust available memory and crash the Prometheus process. This issue has been patched in versions 3.5.3 and 3.11.3."}],"affected":[{"vendor":"prometheus","product":"prometheus","versions":[{"version":"< 3.5.3","status":"affected"},{"version":">= 3.6.0, < 3.11.3","status":"affected"}]}],"references":[{"url":"https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm","name":"https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/prometheus/prometheus/pull/18584","name":"https://github.com/prometheus/prometheus/pull/18584","tags":["x_refsource_MISC"]},{"url":"https://github.com/prometheus/prometheus/pull/18585","name":"https://github.com/prometheus/prometheus/pull/18585","tags":["x_refsource_MISC"]},{"url":"https://github.com/prometheus/prometheus/releases/tag/v3.11.3","name":"https://github.com/prometheus/prometheus/releases/tag/v3.11.3","tags":["x_refsource_MISC"]},{"url":"https://github.com/prometheus/prometheus/releases/tag/v3.5.3","name":"https://github.com/prometheus/prometheus/releases/tag/v3.5.3","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","lang":"en","description":"CWE-400: Uncontrolled Resource Consumption","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-789","lang":"en","description":"CWE-789: Memory Allocation with Excessive Size Value","type":"CWE"}]}],"providerMetadata":{"shortName":"GitHub_M","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","dateUpdated":"2026-05-04T18:13:12.340Z"},"source":{"advisory":"GHSA-8rm2-7qqf-34qm","discovery":"UNKNOWN"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-04T20:18:48.754025Z","id":"CVE-2026-42154","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-04T20:19:13.876Z"}},{"title":"github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint","descriptions":[{"lang":"en","value":"A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"opentelemetry-collector","defaultStatus":"affected","versions":[{"version":"0:0.152.1-1.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"opentelemetry-collector","defaultStatus":"affected","versions":[{"version":"0:0.152.1-1.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"opentelemetry-collector","defaultStatus":"affected","versions":[{"version":"0:0.152.1-1.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","packageName":"opentelemetry-collector","defaultStatus":"affected","versions":[{"version":"0:0.152.1-1.el9_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"opentelemetry-collector","defaultStatus":"affected","versions":[{"version":"0:0.152.1-1.el9_6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6"]},{"vendor":"Red Hat","product":"RHEM 1.0 for RHEL 9","packageName":"flightctl","defaultStatus":"affected","versions":[{"version":"0:1.0.3-1.el9em","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"RHEM 1.1 for RHEL 10","packageName":"flightctl","defaultStatus":"affected","versions":[{"version":"0:1.1.3-1.el10em","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"RHEM 1.1 for RHEL 9","packageName":"flightctl","defaultStatus":"affected","versions":[{"version":"0:1.1.3-1.el9em","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6","packageName":"openshift-logging/loki-rhel9-operator","defaultStatus":"affected","versions":[{"version":"1785418915","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.0::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6","packageName":"openshift-logging/lokistack-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"1785418855","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.0::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6","packageName":"openshift-logging/opa-openshift-rhel9","defaultStatus":"affected","versions":[{"version":"1785418852","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.0::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6.2","packageName":"openshift-logging/loki-rhel9-operator","defaultStatus":"affected","versions":[{"version":"1784747884","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.2::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6.2","packageName":"openshift-logging/lokistack-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"1784747816","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.2::el9"]},{"vendor":"Red Hat","product":"Logging for Red Hat OpenShift 6.2","packageName":"openshift-logging/opa-openshift-rhel9","defaultStatus":"affected","versions":[{"version":"1784747815","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.2::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.4","packageName":"openshift-logging/logging-loki-rhel9","defaultStatus":"affected","versions":[{"version":"1782405469","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.4::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.5","packageName":"openshift-logging/loki-rhel9-operator","defaultStatus":"affected","versions":[{"version":"1786645138","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.5::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.5","packageName":"openshift-logging/lokistack-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"1786645114","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.5::el9"]},{"vendor":"Red Hat","product":"Logging Subsystem for Red Hat OpenShift 6.5","packageName":"openshift-logging/opa-openshift-rhel9","defaultStatus":"affected","versions":[{"version":"1786645109","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:logging:6.5::el9"]},{"vendor":"Red Hat","product":"Multicluster Global Hub 1.4.5","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1784060681","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.4::el9"]},{"vendor":"Red Hat","product":"Multicluster Global Hub 1.6.5","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1784561376","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.6::el9"]},{"vendor":"Red Hat","product":"Multicluster Global Hub 1.7.0","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1784906628","status":"unaffected","lessThan":"*","versionType":"rpm"},{"version":"1785442872","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.7::el9"]},{"vendor":"Red Hat","product":"OpenShift File Integrity Operator - FIO 1","packageName":"compliance/openshift-file-integrity-rhel8-operator","defaultStatus":"affected","versions":[{"version":"1786439449","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","packageName":"rhacm2/prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1782374537","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.13::el9"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.17","packageName":"rhacm2/prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1787230287","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:acm:2.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-alert-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"1783502022","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-alertmanager-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"1783502465","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-api-rhel9","defaultStatus":"affected","versions":[{"version":"1783502025","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-cli-artifacts-rhel9","defaultStatus":"affected","versions":[{"version":"1783502494","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-db-setup-rhel9","defaultStatus":"affected","versions":[{"version":"1783502401","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-pam-issuer-rhel9","defaultStatus":"affected","versions":[{"version":"1783502403","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-periodic-rhel9","defaultStatus":"affected","versions":[{"version":"1783502022","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-telemetry-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"1783502023","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-userinfo-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"1783502029","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.0","packageName":"rhem/flightctl-worker-rhel9","defaultStatus":"affected","versions":[{"version":"1783502445","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.0::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-alert-exporter-rhel10","defaultStatus":"affected","versions":[{"version":"1784194638","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-alertmanager-proxy-rhel10","defaultStatus":"affected","versions":[{"version":"1784194353","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-api-rhel10","defaultStatus":"affected","versions":[{"version":"1784196588","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-cli-artifacts-rhel10","defaultStatus":"affected","versions":[{"version":"1784195620","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-db-setup-rhel10","defaultStatus":"affected","versions":[{"version":"1784194309","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-imagebuilder-api-rhel10","defaultStatus":"affected","versions":[{"version":"1784194144","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-imagebuilder-worker-rhel10","defaultStatus":"affected","versions":[{"version":"1784194188","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-pam-issuer-rhel10","defaultStatus":"affected","versions":[{"version":"1784194653","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-periodic-rhel10","defaultStatus":"affected","versions":[{"version":"1784194144","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-telemetry-gateway-rhel10","defaultStatus":"affected","versions":[{"version":"1784194980","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-userinfo-proxy-rhel10","defaultStatus":"affected","versions":[{"version":"1784194347","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-worker-rhel10","defaultStatus":"affected","versions":[{"version":"1784194971","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el10"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-alert-exporter-rhel9","defaultStatus":"affected","versions":[{"version":"1784128388","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-alertmanager-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"1784128860","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-api-rhel9","defaultStatus":"affected","versions":[{"version":"1784126780","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-cli-artifacts-rhel9","defaultStatus":"affected","versions":[{"version":"1784127787","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-db-setup-rhel9","defaultStatus":"affected","versions":[{"version":"1784126762","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-imagebuilder-api-rhel9","defaultStatus":"affected","versions":[{"version":"1784127762","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-imagebuilder-worker-rhel9","defaultStatus":"affected","versions":[{"version":"1784126832","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-pam-issuer-rhel9","defaultStatus":"affected","versions":[{"version":"1784126774","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-periodic-rhel9","defaultStatus":"affected","versions":[{"version":"1784127791","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-telemetry-gateway-rhel9","defaultStatus":"affected","versions":[{"version":"1784127135","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-userinfo-proxy-rhel9","defaultStatus":"affected","versions":[{"version":"1784126733","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Edge Manager 1.1","packageName":"rhem/flightctl-worker-rhel9","defaultStatus":"affected","versions":[{"version":"1784127775","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:edge_manager:1.1::el9"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"jaeger-main","defaultStatus":"affected","versions":[{"version":"2.19.0-1.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"opentelemetry-collector-main","defaultStatus":"affected","versions":[{"version":"0.153.0-1.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"opentelemetry-collector-contrib-main","defaultStatus":"affected","versions":[{"version":"0.155.0-0.1.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat multicluster global hub 1.5.3","packageName":"multicluster-globalhub/multicluster-globalhub-grafana-rhel9","defaultStatus":"affected","versions":[{"version":"1784562060","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:multicluster_globalhub:1.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","packageName":"openshift4/ose-prometheus","defaultStatus":"affected","versions":[{"version":"1787343838","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.12::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","packageName":"openshift4/ose-prometheus","defaultStatus":"affected","versions":[{"version":"1786999821","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","packageName":"openshift4/ose-prometheus","defaultStatus":"affected","versions":[{"version":"1786998274","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1785582559","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1784828871","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1785360067","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.18::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1784583836","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.19::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1784349713","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.20::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1784053555","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.21::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.22","packageName":"openshift4/ose-prometheus-rhel9","defaultStatus":"affected","versions":[{"version":"1782859326","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.22::el9"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.10","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1783750447","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.10::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.12","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1783751865","status":"unaffected","lessThan":"*","versionType":"rpm"},{"version":"1784353904","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.12::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.15","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1784351966","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.15::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.16","packageName":"quay/quay-rhel9","defaultStatus":"affected","versions":[{"version":"1783955846","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.9","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1784125838","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.9::el8"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/createtree-rhel9","defaultStatus":"affected","versions":[{"version":"1783968861","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/updatetree-rhel9","defaultStatus":"affected","versions":[{"version":"1783968861","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/certificate-transparency-rhel9","defaultStatus":"affected","versions":[{"version":"1783968468","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/trillian-database-rhel9","defaultStatus":"affected","versions":[{"version":"1783960127","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/trillian-logserver-rhel9","defaultStatus":"affected","versions":[{"version":"1783968861","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","packageName":"rhtas/trillian-logsigner-rhel9","defaultStatus":"affected","versions":[{"version":"1783968861","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"]},{"vendor":"Red Hat","product":"File Integrity Operator","packageName":"compliance/openshift-compliance-must-gather-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"]},{"vendor":"Red Hat","product":"File Integrity Operator","packageName":"compliance/openshift-compliance-openscap-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"]},{"vendor":"Red Hat","product":"File Integrity Operator","packageName":"compliance/openshift-compliance-operator-bundle","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"]},{"vendor":"Red Hat","product":"File Integrity Operator","packageName":"compliance/openshift-compliance-rhel8-operator","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"]},{"vendor":"Red Hat","product":"File Integrity Operator","packageName":"compliance/openshift-file-integrity-operator-bundle","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_file_integrity_operator:1"]},{"vendor":"Red Hat","product":"Network Observability Operator","packageName":"network-observability/network-observability-ebpf-agent-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:network_observ_optr:1"]},{"vendor":"Red Hat","product":"Network Observability Operator","packageName":"network-observability/network-observability-flowlogs-pipeline-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:network_observ_optr:1"]},{"vendor":"Red Hat","product":"OpenShift Lightspeed","packageName":"openshift-lightspeed/openshift-mcp-server-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_lightspeed"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 2","packageName":"openshift-service-mesh/istio-cni-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 2","packageName":"openshift-service-mesh/istio-rhel8-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 2","packageName":"openshift-service-mesh/pilot-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 2","packageName":"openshift-service-mesh/proxyv2-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:2"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 3","packageName":"openshift-service-mesh/istio-cni-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:3"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 3","packageName":"openshift-service-mesh/istio-pilot-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:3"]},{"vendor":"Red Hat","product":"OpenShift Service Mesh 3","packageName":"openshift-service-mesh/istio-proxyv2-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_mesh:3"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/acm-grafana-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/acm-multicluster-observability-addon-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/acm-prometheus-config-reloader-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/acm-prometheus-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/endpoint-monitoring-rhel9-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/grafana-dashboard-loader-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/metrics-collector-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/multicluster-observability-rhel9-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/obo-prometheus-rhel9-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/observatorium-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/rbac-query-proxy-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/thanos-receive-controller-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/thanos-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:acm:2"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 5","packageName":"rhceph/rhceph-5-dashboard-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:5"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"rhceph/rhceph-6-dashboard-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 6","packageName":"rhceph/rhceph-promtail-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:6"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","packageName":"rhceph/grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:7"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","packageName":"rhceph/rhceph-promtail-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:7"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","packageName":"rhceph/grafana-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","packageName":"rhceph/rhceph-promtail-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","packageName":"rhceph/grafana-rhel10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ceph_storage:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"grafana","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"host-metering","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"grafana","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"grafana","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"rust","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-agent-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-controller-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-kserve-router-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-llm-d-inference-scheduler-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-llm-d-routing-sidecar-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","packageName":"rhoai/odh-model-registry-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"microshift","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/cnf-tests-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/kube-metrics-server-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/kube-metrics-server-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/microshift-bootc-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-cluster-monitoring-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-cluster-monitoring-rhel9-operator","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-config-reloader","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-config-reloader-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-operator-admission-webhook-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-operator-admission-webhook-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prometheus-rhel9-operator","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prom-label-proxy","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-prom-label-proxy-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-telemeter","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-telemeter-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-thanos-rhel8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-thanos-rhel9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ztp-site-generate-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift GitOps","packageName":"openshift-gitops-1/argocd-rhel8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift GitOps","packageName":"openshift-gitops-1/argocd-rhel9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_gitops:1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"rhoso-operators/openstack-operator-bundle","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-42154","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466505","name":"RHBZ#2466505","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42154.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41019","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36796","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53413","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34357","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53412","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53415","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34359","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34364","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56340","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47952","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50843","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41030","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44622","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47149","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53530","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54288","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30651","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60386","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36651","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40945","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40118","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25039","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29770","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25245","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59833","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56789","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56912","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50758","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47728","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48699","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44235","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44263","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40792","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34794","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41031","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42146","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:43052","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42796","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41066","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40262","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40974","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40970","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40972","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42852","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","description":"Allocation of Resources Without Limits or Throttling","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-09-10T12:04:54.339Z"},"datePublic":"2026-05-04T18:13:12.340Z","solutions":[{"lang":"en","value":"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"},{"lang":"en","value":"RHSA-2026:36796: RHEM 1.0 for RHEL 9"},{"lang":"en","value":"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"},{"lang":"en","value":"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"},{"lang":"en","value":"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"},{"lang":"en","value":"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"},{"lang":"en","value":"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"},{"lang":"en","value":"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"},{"lang":"en","value":"RHSA-2026:50843: Logging for Red Hat OpenShift 6"},{"lang":"en","value":"RHSA-2026:41030: Multicluster Global Hub 1.4.5"},{"lang":"en","value":"RHSA-2026:44622: Multicluster Global Hub 1.6.5"},{"lang":"en","value":"RHSA-2026:47149: Multicluster Global Hub 1.7.0"},{"lang":"en","value":"RHSA-2026:53530: Multicluster Global Hub 1.7.0"},{"lang":"en","value":"RHSA-2026:54288: OpenShift File Integrity Operator - FIO 1"},{"lang":"en","value":"RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"},{"lang":"en","value":"RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"},{"lang":"en","value":"RHSA-2026:36651: Red Hat Edge Manager 1.0"},{"lang":"en","value":"RHSA-2026:40945: Red Hat Edge Manager 1.1"},{"lang":"en","value":"RHSA-2026:40118: Red Hat Edge Manager 1.1"},{"lang":"en","value":"RHSA-2026:25039: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:29770: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:25245: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12"},{"lang":"en","value":"RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14"},{"lang":"en","value":"RHSA-2026:56912: Red Hat OpenShift Container Platform 4.15"},{"lang":"en","value":"RHSA-2026:50758: Red Hat OpenShift Container Platform 4.16"},{"lang":"en","value":"RHSA-2026:47728: Red Hat OpenShift Container Platform 4.17"},{"lang":"en","value":"RHSA-2026:48699: Red Hat OpenShift Container Platform 4.18"},{"lang":"en","value":"RHSA-2026:44235: Red Hat OpenShift Container Platform 4.19"},{"lang":"en","value":"RHSA-2026:44263: Red Hat OpenShift Container Platform 4.20"},{"lang":"en","value":"RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21"},{"lang":"en","value":"RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"},{"lang":"en","value":"RHSA-2026:41031: Red Hat Quay 3.10"},{"lang":"en","value":"RHSA-2026:42146: Red Hat Quay 3.12"},{"lang":"en","value":"RHSA-2026:43052: Red Hat Quay 3.12"},{"lang":"en","value":"RHSA-2026:42796: Red Hat Quay 3.15"},{"lang":"en","value":"RHSA-2026:41066: Red Hat Quay 3.16"},{"lang":"en","value":"RHSA-2026:40262: Red Hat Quay 3.9"},{"lang":"en","value":"RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"},{"lang":"en","value":"RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3"},{"lang":"en","value":"RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3"},{"lang":"en","value":"RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"}],"timeline":[{"lang":"en","time":"2026-05-04T19:02:19.626Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-05-04T18:13:12.340Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}