RHSA-2026:81201

Vulnerability from csaf_redhat - Published: 2026-10-12 14:39 - Updated: 2026-10-14 19:31
Summary
Red Hat Security Advisory: Cost Management Metrics Operator Update
Severity
Important
Notes
Topic: Cost Management Metrics Operator version 4.5.0 release.
Details: The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every hour to create metric reports that it uploads to Cost Management at console.redhat.com.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-5435

A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Product Identifier Version Remediation
Unresolved product id: Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x —
Vendor Fix fix
Unresolved product id: Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64 —
Vendor Fix fix
Unresolved product id: Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le —
Vendor Fix fix
Unresolved product id: Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64 —
Threats
Impact Moderate
CVE-2026-5928

A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.

5.0 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-6238

A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.

6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-1284 - Improper Validation of Specified Quantity in Input
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-13757

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

6.2 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-674 - Uncontrolled Recursion
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-14456

A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Important
CVE-2026-18378

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.

7.6 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Important
CVE-2026-18381

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this user-controlled URL, allowing the attacker to obtain the token.

7.6 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Important
CVE-2026-18382

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO client_id and client_secret to this user-controlled URL, allowing the attacker to obtain the credentials.

6.8 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-18798

A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-415 - Double Free
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-54369

A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Important
CVE-2026-54371

A flaw was found in the `attr` package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by `getfattr` or during backup restoration by `setfattr`, which reads and resolves full pathnames from backup files. In both cases, when these utilities are executed by a privileged process over a path controlled by the attacker, this can lead to local privilege escalation.

6.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-56392

A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.

4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-63072

A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
CVE-2026-63076

A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 - NULL Pointer Dereference
Affected products
Fixed 4 products, the same list as for CVE-2026-5435
Known not affected 1 product, the same list as for CVE-2026-5435
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:81201 self
https://access.redhat.com/security/cve/CVE-2026-13757 external
https://access.redhat.com/security/cve/CVE-2026-14456 external
https://access.redhat.com/security/cve/CVE-2026-18378 external
https://access.redhat.com/security/cve/CVE-2026-18381 external
https://access.redhat.com/security/cve/CVE-2026-18382 external
https://access.redhat.com/security/cve/CVE-2026-18798 external
https://access.redhat.com/security/cve/CVE-2026-5435 external
https://access.redhat.com/security/cve/CVE-2026-54369 external
https://access.redhat.com/security/cve/CVE-2026-54371 external
https://access.redhat.com/security/cve/CVE-2026-56392 external
https://access.redhat.com/security/cve/CVE-2026-5928 external
https://access.redhat.com/security/cve/CVE-2026-6238 external
https://access.redhat.com/security/cve/CVE-2026-63072 external
https://access.redhat.com/security/cve/CVE-2026-63076 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/cost_man… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-5435 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463465 external
https://www.cve.org/CVERecord?id=CVE-2026-5435 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 external
https://inbox.sourceware.org/libc-announce/7a655d… external
https://sourceware.org/bugzilla/show_bug.cgi?id=34033 external
https://access.redhat.com/security/cve/CVE-2026-5928 self
https://bugzilla.redhat.com/show_bug.cgi?id=2459854 external
https://www.cve.org/CVERecord?id=CVE-2026-5928 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 external
https://sourceware.org/bugzilla/show_bug.cgi?id=33998 external
https://access.redhat.com/security/cve/CVE-2026-6238 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463539 external
https://www.cve.org/CVERecord?id=CVE-2026-6238 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 external
https://sourceware.org/bugzilla/show_bug.cgi?id=34069 external
https://access.redhat.com/security/cve/CVE-2026-13757 self
https://bugzilla.redhat.com/show_bug.cgi?id=2494556 external
https://www.cve.org/CVERecord?id=CVE-2026-13757 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13757 external
https://github.com/advisories/GHSA-p2wm-69qx-x25w external
https://access.redhat.com/security/cve/CVE-2026-14456 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515348 external
https://www.cve.org/CVERecord?id=CVE-2026-14456 external
https://nvd.nist.gov/vuln/detail/CVE-2026-14456 external
https://github.com/openssl/openssl/commit/08e7756… external
https://github.com/openssl/openssl/commit/4084152… external
https://github.com/openssl/openssl/commit/f2f1465… external
https://openssl-library.org/news/secadv/20260813.txt external
https://access.redhat.com/security/cve/CVE-2026-18378 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509249 external
https://www.cve.org/CVERecord?id=CVE-2026-18378 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18378 external
https://access.redhat.com/security/cve/CVE-2026-18381 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509251 external
https://www.cve.org/CVERecord?id=CVE-2026-18381 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18381 external
https://access.redhat.com/security/cve/CVE-2026-18382 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509253 external
https://www.cve.org/CVERecord?id=CVE-2026-18382 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18382 external
https://access.redhat.com/security/cve/CVE-2026-18798 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517559 external
https://www.cve.org/CVERecord?id=CVE-2026-18798 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18798 external
https://openssl-library.org/news/secadv/20260825.txt external
https://access.redhat.com/security/cve/CVE-2026-54369 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490277 external
https://www.cve.org/CVERecord?id=CVE-2026-54369 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54369 external
https://access.redhat.com/security/cve/CVE-2026-54371 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490283 external
https://www.cve.org/CVERecord?id=CVE-2026-54371 external
https://nvd.nist.gov/vuln/detail/CVE-2026-54371 external
https://access.redhat.com/security/cve/CVE-2026-56392 self
https://bugzilla.redhat.com/show_bug.cgi?id=2506694 external
https://www.cve.org/CVERecord?id=CVE-2026-56392 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56392 external
https://cert.pl/en/posts/2026/07/CVE-2026-56391 external
https://git.savannah.gnu.org/cgit/coreutils.git/ external
https://git.savannah.gnu.org/cgit/coreutils.git/c… external
https://access.redhat.com/security/cve/CVE-2026-63072 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517560 external
https://www.cve.org/CVERecord?id=CVE-2026-63072 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63072 external
https://access.redhat.com/security/cve/CVE-2026-63076 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517561 external
https://www.cve.org/CVERecord?id=CVE-2026-63076 external
https://nvd.nist.gov/vuln/detail/CVE-2026-63076 external
Acknowledgments
Andrew Tridgell <tridge60@gmail.com> Alexander Peslyak <solar@openwall.com>
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Cost Management Metrics Operator version 4.5.0 release.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift.\nThe operator runs on the latest supported versions of Openshift.\nThis operator obtains OpenShift usage data by querying Prometheus every hour to create metric reports\nthat it uploads to Cost Management at console.redhat.com.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:81201",
        "url": "https://access.redhat.com/errata/RHSA-2026:81201"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13757",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13757"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-14456",
        "url": "https://access.redhat.com/security/cve/CVE-2026-14456"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18378",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18378"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18381",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18381"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18382",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18382"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-18798",
        "url": "https://access.redhat.com/security/cve/CVE-2026-18798"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54369"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54371",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54371"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56392",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56392"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6238",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63072",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63072"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-63076",
        "url": "https://access.redhat.com/security/cve/CVE-2026-63076"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification",
        "url": "https://access.redhat.com/security/updates/classification"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management",
        "url": "https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81201.json"
      }
    ],
    "title": "Red Hat Security Advisory: Cost Management Metrics Operator Update",
    "tracking": {
      "current_release_date": "2026-10-14T19:31:08+00:00",
      "generator": {
        "date": "2026-10-14T19:31:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:81201",
      "initial_release_date": "2026-10-12T14:39:43+00:00",
      "revision_history": [
        {
          "date": "2026-10-12T14:39:43+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-12T14:39:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-14T19:31:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cost Management 4",
                "product": {
                  "name": "Cost Management 4",
                  "product_id": "Cost Management 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cost_management:4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cost Management"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
                "product": {
                  "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
                  "product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3A2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af?arch=amd64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1790844333"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
                "product": {
                  "name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
                  "product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/costmanagement-metrics-operator-bundle@sha256%3A237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b?arch=amd64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle\u0026tag=1790851152"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64",
                "product": {
                  "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64",
                  "product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3Ad7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea?arch=arm64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1790844333"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
                  "product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3Acb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9?arch=ppc64le\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1790844333"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
                "product": {
                  "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
                  "product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3A1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28?arch=s390x\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1790844333"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64 as a component of Cost Management 4",
          "product_id": "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        },
        "product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
        "relates_to_product_reference": "Cost Management 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x as a component of Cost Management 4",
          "product_id": "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x"
        },
        "product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
        "relates_to_product_reference": "Cost Management 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64 as a component of Cost Management 4",
          "product_id": "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64"
        },
        "product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
        "relates_to_product_reference": "Cost Management 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le as a component of Cost Management 4",
          "product_id": "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le"
        },
        "product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
        "relates_to_product_reference": "Cost Management 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64 as a component of Cost Management 4",
          "product_id": "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        },
        "product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64",
        "relates_to_product_reference": "Cost Management 4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-5435",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-04-28T14:01:44.684432+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463465"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463465",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
        }
      ],
      "release_date": "2026-04-28T11:58:54.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
    },
    {
      "cve": "CVE-2026-5928",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-20T21:01:38.811304+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2459854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "RHBZ#2459854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
        }
      ],
      "release_date": "2026-04-20T20:37:31.743000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
    },
    {
      "cve": "CVE-2026-6238",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-04-28T19:09:30.721026+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463539"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463539",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069"
        }
      ],
      "release_date": "2026-04-28T16:43:08.526000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response"
    },
    {
      "cve": "CVE-2026-13757",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2026-06-23T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494556"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13757"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494556",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494556"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13757",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13757"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13757"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-p2wm-69qx-x25w",
          "url": "https://github.com/advisories/GHSA-p2wm-69qx-x25w"
        }
      ],
      "release_date": "2026-06-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "This CVE requires same-user access to the p11-kit RPC Unix domain socket (/run/user/\u003cuid\u003e/p11-kit/pkcs11-*). Any process running as the socket-owning user can trigger the crash without further authentication.\n\nIf p11-kit is managed via systemd --user, ensure `Restart=on-failure` is set in the unit file so that a crash is automatically recovered without manual intervention.\n\nRed Hat recommends updating p11-kit to version 0.26.3 or later, which introduces a recursion depth limit in the RPC attribute parsing and fully addresses this flaw.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing"
    },
    {
      "cve": "CVE-2026-14456",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T14:21:24.109249+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515348"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 9.8+, 10.2+, Red Hat Hardened Images, RHIVOS 2, and OpenShift 4.22 ship OpenSSL 3.5.x which includes the QUIC server implementation affected by this flaw. Earlier RHEL versions ship OpenSSL 3.2.x or below, which do not include the QUIC server feature and are not affected. The FIPS module is not affected as the QUIC implementation is outside the OpenSSL FIPS module boundary. Applications must explicitly enable the QUIC server listener to be vulnerable; simply having OpenSSL 3.5 installed does not expose the flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515348",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515348"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14456"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",
          "url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b",
          "url": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139",
          "url": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260813.txt",
          "url": "https://openssl-library.org/news/secadv/20260813.txt"
        }
      ],
      "release_date": "2026-08-13T13:55:52.370000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Option 1: Rate-limit or Firewall Inbound QUIC (UDP 443) [Goal: Slow or block QUIC Initial packets before they reach the vulnerable listener.]\n\nA. Confirm QUIC Exposure - Check if any service is listening on UDP 443:\n~~~\n$ ss -ulnp | grep \u0027:443\u0027\n# or\n$ sudo lsof -iUDP:443 -n -P\n~~~\n\nNote: If no service is listening on UDP 443, this CVE does not apply (TCP 443 is unaffected).\n\nB. Restrict Access to UDP 443 ( Default-deny UDP 443 and allow only trusted networks:)\n~~~\n$ sudo firewall-cmd --permanent --remove-service=quic 2\u003e/dev/null\n$ sudo firewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" source address=\"10.0.0.0/8\" port port=\"443\" protocol=\"udp\" accept\u0027\n$ sudo firewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" port port=\"443\" protocol=\"udp\" drop\u0027\n$ sudo firewall-cmd --reload\n~~~\n\nC. Verify - Confirm the restriction by testing from an external host (the connection should fail or be throttled):\n~~~\n$ nc -u -v YOUR_HOST 443\n~~~\n\nOption 2: Disable QUIC Server\n\nIf QUIC/HTTP3 is not required, remove the vulnerable code path entirely and use TLS/TCP instead.\n\nRecommended Mitigation Priority\nPriority : Action\n1.Confirm UDP 443 QUIC listener exists and OpenSSL version is in affected range\n2.Block or rate-limit UDP 443 at firewall/edge (immediate)\n3.Disable QUIC/HTTP3 on the service if not needed\n4.Upgrade OpenSSL to fixed release when available\n5.Application owners: set SSL_VALUE_QUIC_MAX_PENDING_CONNS if default 256 is too high",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server"
    },
    {
      "cve": "CVE-2026-18378",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509249"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in koku-metrics-operator. The operator\u0027s CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18378"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509249",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509249"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18378",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18378"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18378",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18378"
        }
      ],
      "release_date": "2026-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy)"
    },
    {
      "cve": "CVE-2026-18381",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509251"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator\u0027s CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this user-controlled URL, allowing the attacker to obtain the token.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18381"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509251",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509251"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18381",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18381"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18381",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18381"
        }
      ],
      "release_date": "2026-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address"
    },
    {
      "cve": "CVE-2026-18382",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-05-26T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in koku-metrics-operator. The operator\u0027s CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant\u0027s Red Hat SSO client_id and client_secret to this user-controlled URL, allowing the attacker to obtain the credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18382"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18382",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18382"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18382",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18382"
        }
      ],
      "release_date": "2026-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url"
    },
    {
      "cve": "CVE-2026-18798",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2026-08-17T19:14:03.992000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517559"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: QUIC server may trigger double free when processing INITIAL packet",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue can cause memory corruption due to the double free of the QRX object. However, there is currently no evidence it allows remote code execution, limiting the impact of this vulnerability to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517559",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517559"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18798",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18798"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: QUIC server may trigger double free when processing INITIAL packet"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Tridgell \u003ctridge60@gmail.com\u003e",
            "Alexander Peslyak \u003csolar@openwall.com\u003e"
          ]
        }
      ],
      "cve": "CVE-2026-54369",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-06-16T23:47:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "acl: Symlink traversal privilege escalation via libacl functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Important because a local attacker who controls any component of a pathname processed by a privileged process using libacl can redirect ACL operations to arbitrary files. Exploitation requires local access with the ability to create symlinks in a directory that a privileged program later processes with acl_get_file() or acl_set_file(). In default RHEL and OpenShift CoreOS configurations, standard file permission settings limit where unprivileged users can create symlinks, reducing the practical attack surface. Programs that operate on user-supplied paths with elevated privileges are most at risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
        }
      ],
      "release_date": "2026-06-29T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Restrict unprivileged users from creating symlinks in directories that privileged processes operate on with ACL commands. Where possible, use the fs.protected_symlinks sysctl (enabled by default on RHEL 7+), which prevents symlink following in world-writable sticky directories unless the owner of the symlink matches the owner of the target file or directory.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "acl: Symlink traversal privilege escalation via libacl functions"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Tridgell \u003ctridge60@gmail.com\u003e",
            "Alexander Peslyak \u003csolar@openwall.com\u003e"
          ]
        }
      ],
      "cve": "CVE-2026-54371",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-06-16T23:47:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490283"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `attr` package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by `getfattr` or during backup restoration by `setfattr`, which reads and resolves full pathnames from backup files. In both cases, when these utilities are executed by a privileged process over a path controlled by the attacker, this can lead to local privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate severity flaw in the `getfattr` utility allows a local attacker to achieve privilege escalation. Exploitation requires a privileged process to invoke `getfattr` on a path controlled by the attacker, where a symbolic link can redirect operations to arbitrary files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54371"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490283",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54371",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54371"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371"
        }
      ],
      "release_date": "2026-06-29T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr"
    },
    {
      "cve": "CVE-2026-56392",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-07-24T09:01:08.479352+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2506694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GNU coreutils, specifically in the `unexpand` utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when `unexpand` processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing subsequent operations to write beyond its boundaries. Successful exploitation can cause the `unexpand` utility to crash, potentially resulting in a denial of service or enabling further memory manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A Moderate impact heap-based buffer overflow flaw was found in the `unexpand` utility of GNU coreutils. This vulnerability arises from an integer overflow when processing unusually large tab stop values, leading to an undersized buffer. A local attacker could exploit this by providing crafted input, causing the utility to crash and potentially leading to a denial of service or arbitrary memory manipulation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "RHBZ#2506694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56392",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "https://cert.pl/en/posts/2026/07/CVE-2026-56391",
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391"
        },
        {
          "category": "external",
          "summary": "https://git.savannah.gnu.org/cgit/coreutils.git/",
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/"
        },
        {
          "category": "external",
          "summary": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
        }
      ],
      "release_date": "2026-07-24T07:44:54.885000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values"
    },
    {
      "cve": "CVE-2026-63072",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-17T19:24:54.673000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A crafted CMS (Cryptographic Message Syntax) message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMS_decrypt(). This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap primitive. This can lead to memory corruption, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: heap buffer overflow in CMS key unwrapping",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply a crafted CMS message to be decrypted in an application by CMS_decrypt(). The out-of-bounds write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the memory allocation, causing memory corruption, but the impact is limited to a denial of service. For these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: heap buffer overflow in CMS key unwrapping"
    },
    {
      "cve": "CVE-2026-63076",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-08-17T19:30:30.087000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517561"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A crafted CMP (Certificate Management Protocol) message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to supply a crafted CMP message to an application acting as a CMP server or client. Server applications need to be configured to accept PBM-protected messages, and client applications need to communicate with a malicious or intercepted CMP server. The missing type check causes an invalid pointer dereference, resulting in a denial of service. There is no memory disclosure, no controlled memory write and no path to code execution. For these reasons, this vulnerability has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
        ],
        "known_not_affected": [
          "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517561",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517561"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260825.txt",
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        }
      ],
      "release_date": "2026-08-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T14:39:43+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:237da915b912147a7a1fb899b73517234aaf29850fcdf031ea975833329a4b2b_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c33b0f90b5ebd644833283c8bf8618fcc6d4adcf2b88474542b367403970b28_s390x",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:2314ac011e3897fa148651caa23507f014e3e55f885fd8af326b417e87aa65af_amd64",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:cb8c639a89d6f3793761d30bb302abed5b862b705fb742f098e0931d75eaadc9_ppc64le",
            "Cost Management 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:d7c927c4718907934daf9fb5dd9b02478b491d861d00f5ba0958dddb7dfee8ea_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: invalid pointer dereference in CMP server via crafted protectionAlg"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.