{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Regular expression denial of service when the application is provided and checks a crafted invalid HWB string",
    "tracking": {
      "current_release_date": "2026-08-14T04:40:03+00:00",
      "generator": {
        "date": "2026-08-14T04:40:03+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2021-29060",
      "initial_release_date": "2021-06-21T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-14T04:40:03+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "OpenShift Service Mesh maistra-1.1.3",
            "product": {
              "name": "OpenShift Service Mesh maistra-1.1.3",
              "product_id": "maistra-1.1.3",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:service_mesh:1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.19",
            "product": {
              "name": "OpenShift Container Platform 4.19",
              "product_id": "openshift-4",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.12",
            "product": {
              "name": "OpenShift Container Platform 4.12",
              "product_id": "openshift-4.12.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.12"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.13",
            "product": {
              "name": "OpenShift Container Platform 4.13",
              "product_id": "openshift-4.13.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.13"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.14",
            "product": {
              "name": "OpenShift Container Platform 4.14",
              "product_id": "openshift-4.14.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.14"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.15.z",
            "product": {
              "name": "OpenShift Container Platform 4.15.z",
              "product_id": "openshift-4.15.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.15"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.16.z",
            "product": {
              "name": "OpenShift Container Platform 4.16.z",
              "product_id": "openshift-4.16.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.16"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.17",
            "product": {
              "name": "OpenShift Container Platform 4.17",
              "product_id": "openshift-4.17",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.17"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.18",
            "product": {
              "name": "OpenShift Container Platform 4.18",
              "product_id": "openshift-4.18",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.18"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.19",
            "product": {
              "name": "OpenShift Container Platform 4.19",
              "product_id": "openshift-4.19",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.19"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.20",
            "product": {
              "name": "OpenShift Container Platform 4.20",
              "product_id": "openshift-4.20",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.20"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 3.11.0",
            "product": {
              "name": "OpenShift Container Platform 3.11.0",
              "product_id": "openshift-enterprise-3.11",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:3"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform Logging 5.8.z",
            "product": {
              "name": "OpenShift Container Platform Logging 5.8.z",
              "product_id": "openshift-logging-5.8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:logging:5.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform Logging 5.9.z",
            "product": {
              "name": "OpenShift Container Platform Logging 5.9.z",
              "product_id": "openshift-logging-5.9",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:logging:5.9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Service Mesh OSSM 2.0.0",
            "product": {
              "name": "OpenShift Service Mesh OSSM 2.0.0",
              "product_id": "ossm-2.0",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:service_mesh:2.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Quay v3.6.0",
            "product": {
              "name": "Red Hat Quay v3.6.0",
              "product_id": "quay-3.6",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:quay:3"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0",
              "product_id": "rhacm-2.11.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.11"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0",
              "product_id": "rhacm-2.12.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.12"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0",
              "product_id": "rhacm-2.13.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.13"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0",
              "product_id": "rhacm-2.14",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.14"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0",
              "product_id": "rhacm-2.15",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.15"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Virtualization 4.4.0",
            "product": {
              "name": "Red Hat Enterprise Virtualization 4.4.0",
              "product_id": "rhev-m-4",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhev_manager:4"
              }
            }
          },
          {
            "category": "product_version",
            "name": "kibana",
            "product": {
              "name": "kibana",
              "product_id": "kibana",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/kibana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "kibana",
            "product": {
              "name": "kibana",
              "product_id": "kibana.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/kibana?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-logging/kibana6-rhel8",
            "product": {
              "name": "openshift-logging/kibana6-rhel8",
              "product_id": "openshift-logging/kibana6-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/kibana6-rhel8?repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-grafana",
            "product": {
              "name": "openshift4/ose-grafana",
              "product_id": "openshift4/ose-grafana",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-grafana?repository_url=registry.redhat.io/openshift4/ose-grafana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-logging-kibana6",
            "product": {
              "name": "openshift4/ose-logging-kibana6",
              "product_id": "openshift4/ose-logging-kibana6",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-logging-kibana6?repository_url=registry.redhat.io/openshift4/ose-logging-kibana6"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-prometheus-rhel9",
            "product": {
              "name": "openshift4/ose-prometheus-rhel9",
              "product_id": "openshift4/ose-prometheus-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-prometheus-rhel9?repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-thanos-rhel9",
            "product": {
              "name": "openshift4/ose-thanos-rhel9",
              "product_id": "openshift4/ose-thanos-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-thanos-rhel9?repository_url=registry.redhat.io/openshift4/ose-thanos-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-engine-ui-extensions",
            "product": {
              "name": "ovirt-engine-ui-extensions",
              "product_id": "ovirt-engine-ui-extensions.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-engine-ui-extensions?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "quay/quay-rhel8",
            "product": {
              "name": "quay/quay-rhel8",
              "product_id": "quay/quay-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-rhel8",
            "product": {
              "name": "rhacm2/console-rhel8",
              "product_id": "rhacm2/console-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-rhel8?repository_url=registry.redhat.io/rhacm2/console-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-ui-rhel8",
            "product": {
              "name": "rhacm2/console-ui-rhel8",
              "product_id": "rhacm2/console-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-ui-rhel8?repository_url=registry.redhat.io/rhacm2/console-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/search-ui-rhel8",
            "product": {
              "name": "rhacm2/search-ui-rhel8",
              "product_id": "rhacm2/search-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/search-ui-rhel8?repository_url=registry.redhat.io/rhacm2/search-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana",
            "product": {
              "name": "servicemesh-grafana",
              "product_id": "servicemesh-grafana",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana-prometheus",
            "product": {
              "name": "servicemesh-grafana-prometheus",
              "product_id": "servicemesh-grafana-prometheus",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana-prometheus"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana",
            "product": {
              "name": "servicemesh-grafana",
              "product_id": "servicemesh-grafana.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-prometheus",
            "product": {
              "name": "servicemesh-prometheus",
              "product_id": "servicemesh-prometheus",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-prometheus"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-prometheus",
            "product": {
              "name": "servicemesh-prometheus",
              "product_id": "servicemesh-prometheus.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-prometheus?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11:kibana"
        },
        "product_reference": "kibana",
        "relates_to_product_reference": "openshift-enterprise-3.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4.19:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.13",
          "product_id": "openshift-4.13.z:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.13.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.15.z",
          "product_id": "openshift-4.15.z:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.15.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.12",
          "product_id": "openshift-4.12.z:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.12.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.16.z",
          "product_id": "openshift-4.16.z:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.16.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.17",
          "product_id": "openshift-4.17:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.14",
          "product_id": "openshift-4.14.z:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.14.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-enterprise-3.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.18",
          "product_id": "openshift-4.18:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana.src as a component of OpenShift Container Platform 4.20",
          "product_id": "openshift-4.20:kibana.src"
        },
        "product_reference": "kibana.src",
        "relates_to_product_reference": "openshift-4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8 as a component of OpenShift Container Platform Logging 5.9.z",
          "product_id": "openshift-logging-5.9:openshift-logging/kibana6-rhel8"
        },
        "product_reference": "openshift-logging/kibana6-rhel8",
        "relates_to_product_reference": "openshift-logging-5.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8 as a component of OpenShift Container Platform Logging 5.8.z",
          "product_id": "openshift-logging-5.8:openshift-logging/kibana6-rhel8"
        },
        "product_reference": "openshift-logging/kibana6-rhel8",
        "relates_to_product_reference": "openshift-logging-5.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-grafana as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4:openshift4/ose-grafana"
        },
        "product_reference": "openshift4/ose-grafana",
        "relates_to_product_reference": "openshift-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.12",
          "product_id": "openshift-4.12.z:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.12.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.15.z",
          "product_id": "openshift-4.15.z:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.15.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.16.z",
          "product_id": "openshift-4.16.z:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.16.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.13",
          "product_id": "openshift-4.13.z:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.13.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.14",
          "product_id": "openshift-4.14.z:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.14.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.17",
          "product_id": "openshift-4.17:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.20",
          "product_id": "openshift-4.20:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.18",
          "product_id": "openshift-4.18:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-logging-kibana6 as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4.19:openshift4/ose-logging-kibana6"
        },
        "product_reference": "openshift4/ose-logging-kibana6",
        "relates_to_product_reference": "openshift-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-prometheus-rhel9 as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4:openshift4/ose-prometheus-rhel9"
        },
        "product_reference": "openshift4/ose-prometheus-rhel9",
        "relates_to_product_reference": "openshift-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-thanos-rhel9 as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4:openshift4/ose-thanos-rhel9"
        },
        "product_reference": "openshift4/ose-thanos-rhel9",
        "relates_to_product_reference": "openshift-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-engine-ui-extensions.src as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-engine-ui-extensions.src"
        },
        "product_reference": "ovirt-engine-ui-extensions.src",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-web-ui"
        },
        "product_reference": "ovirt-web-ui",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui.src as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-web-ui.src"
        },
        "product_reference": "ovirt-web-ui.src",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8 as a component of Red Hat Quay v3.6.0",
          "product_id": "quay-3.6:quay/quay-rhel8"
        },
        "product_reference": "quay/quay-rhel8",
        "relates_to_product_reference": "quay-3.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0",
          "product_id": "rhacm-2.11.z:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2.11.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0",
          "product_id": "rhacm-2.13.z:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2.13.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0",
          "product_id": "rhacm-2.15:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0",
          "product_id": "rhacm-2.12.z:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2.12.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0",
          "product_id": "rhacm-2.14:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0",
          "product_id": "rhacm-2.13.z:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.13.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0",
          "product_id": "rhacm-2.11.z:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.11.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0",
          "product_id": "rhacm-2.15:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0",
          "product_id": "rhacm-2.12.z:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.12.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0",
          "product_id": "rhacm-2.14:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0",
          "product_id": "rhacm-2.15:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0",
          "product_id": "rhacm-2.12.z:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.12.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0",
          "product_id": "rhacm-2.14:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0",
          "product_id": "rhacm-2.13.z:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.13.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0",
          "product_id": "rhacm-2.11.z:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2.11.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana as a component of OpenShift Service Mesh maistra-1.1.3",
          "product_id": "maistra-1.1.3:servicemesh-grafana"
        },
        "product_reference": "servicemesh-grafana",
        "relates_to_product_reference": "maistra-1.1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana"
        },
        "product_reference": "servicemesh-grafana",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-prometheus as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana-prometheus"
        },
        "product_reference": "servicemesh-grafana-prometheus",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-prometheus as a component of OpenShift Service Mesh maistra-1.1.3",
          "product_id": "maistra-1.1.3:servicemesh-grafana-prometheus"
        },
        "product_reference": "servicemesh-grafana-prometheus",
        "relates_to_product_reference": "maistra-1.1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana.src as a component of OpenShift Service Mesh maistra-1.1.3",
          "product_id": "maistra-1.1.3:servicemesh-grafana.src"
        },
        "product_reference": "servicemesh-grafana.src",
        "relates_to_product_reference": "maistra-1.1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana.src as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana.src"
        },
        "product_reference": "servicemesh-grafana.src",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-prometheus"
        },
        "product_reference": "servicemesh-prometheus",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus as a component of OpenShift Service Mesh maistra-1.1.3",
          "product_id": "maistra-1.1.3:servicemesh-prometheus"
        },
        "product_reference": "servicemesh-prometheus",
        "relates_to_product_reference": "maistra-1.1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus.src as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-prometheus.src"
        },
        "product_reference": "servicemesh-prometheus.src",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-prometheus.src as a component of OpenShift Service Mesh maistra-1.1.3",
          "product_id": "maistra-1.1.3:servicemesh-prometheus.src"
        },
        "product_reference": "servicemesh-prometheus.src",
        "relates_to_product_reference": "maistra-1.1.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-29060",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-06-22T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "openshift-logging-5.8:openshift-logging/kibana6-rhel8",
            "openshift-logging-5.9:openshift-logging/kibana6-rhel8",
            "rhacm-2.11.z:rhacm2/console-rhel8",
            "rhacm-2.11.z:rhacm2/console-ui-rhel8",
            "rhacm-2.11.z:rhacm2/search-ui-rhel8",
            "rhacm-2.12.z:rhacm2/console-rhel8",
            "rhacm-2.12.z:rhacm2/console-ui-rhel8",
            "rhacm-2.12.z:rhacm2/search-ui-rhel8",
            "rhacm-2.13.z:rhacm2/console-rhel8",
            "rhacm-2.13.z:rhacm2/console-ui-rhel8",
            "rhacm-2.13.z:rhacm2/search-ui-rhel8",
            "rhacm-2.14:rhacm2/console-rhel8",
            "rhacm-2.14:rhacm2/console-ui-rhel8",
            "rhacm-2.14:rhacm2/search-ui-rhel8",
            "rhacm-2.15:rhacm2/console-rhel8",
            "rhacm-2.15:rhacm2/console-ui-rhel8",
            "rhacm-2.15:rhacm2/search-ui-rhel8"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "OpenShift Service Mesh 1.1.x is in its maintenance phase, only Important and Critical vulnerabilities will be fixed at this time.\n\nIn OpenShift Container Platform (OCP) and OpenShift Service Mesh (OSSM) some components include the vulnerable color-string library, but access is protected by OpenShift OAuth what reducing impact by this flaw to LOW.\nStarting in OCP 4.7, the kibana component is shipping as \"container first\" content and as a part of the OpenShift Logging product (openshift-logging/kibana6-rhel8) and is not affected by this vulnerability. The kibana components delivered in OCP 4.6 and earlier are marked as `Out of support scope` because these versions are already under Maintenance Phase of the support.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) all containers are using the 1.5.5 fixed version, hence not RHACM version is affected by this flaw.\n\nIn Red Hat Virtualization a vulnerable version of color-string is used in ovirt-web-ui and ovirt-engine-ui-extensions. It is a build-time dependency not exploitable in the delivered product. Therefore impact is rated Low and it will not be immediately fixed. An update may be provided in future releases.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A Regular Expression Denial of Service (ReDOS) vulnerability was found in Color-String, which occurs when the application is provided and checks a crafted invalid HWB string. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "maistra-1.1.3:servicemesh-grafana",
          "maistra-1.1.3:servicemesh-grafana-prometheus",
          "maistra-1.1.3:servicemesh-grafana.src",
          "maistra-1.1.3:servicemesh-prometheus",
          "maistra-1.1.3:servicemesh-prometheus.src",
          "openshift-4.12.z:kibana.src",
          "openshift-4.12.z:openshift4/ose-logging-kibana6",
          "openshift-4.13.z:kibana.src",
          "openshift-4.13.z:openshift4/ose-logging-kibana6",
          "openshift-4.14.z:kibana.src",
          "openshift-4.14.z:openshift4/ose-logging-kibana6",
          "openshift-4.15.z:kibana.src",
          "openshift-4.15.z:openshift4/ose-logging-kibana6",
          "openshift-4.16.z:kibana.src",
          "openshift-4.16.z:openshift4/ose-logging-kibana6",
          "openshift-4.17:kibana.src",
          "openshift-4.17:openshift4/ose-logging-kibana6",
          "openshift-4.18:kibana.src",
          "openshift-4.18:openshift4/ose-logging-kibana6",
          "openshift-4.19:kibana.src",
          "openshift-4.19:openshift4/ose-logging-kibana6",
          "openshift-4.20:kibana.src",
          "openshift-4.20:openshift4/ose-logging-kibana6",
          "openshift-4:openshift4/ose-grafana",
          "openshift-4:openshift4/ose-prometheus-rhel9",
          "openshift-4:openshift4/ose-thanos-rhel9",
          "openshift-enterprise-3.11:kibana",
          "openshift-enterprise-3.11:kibana.src",
          "ossm-2.0:servicemesh-grafana",
          "ossm-2.0:servicemesh-grafana-prometheus",
          "ossm-2.0:servicemesh-grafana.src",
          "ossm-2.0:servicemesh-prometheus",
          "ossm-2.0:servicemesh-prometheus.src",
          "quay-3.6:quay/quay-rhel8",
          "rhev-m-4:ovirt-engine-ui-extensions.src",
          "rhev-m-4:ovirt-web-ui",
          "rhev-m-4:ovirt-web-ui.src"
        ],
        "known_not_affected": [
          "openshift-logging-5.8:openshift-logging/kibana6-rhel8",
          "openshift-logging-5.9:openshift-logging/kibana6-rhel8",
          "rhacm-2.11.z:rhacm2/console-rhel8",
          "rhacm-2.11.z:rhacm2/console-ui-rhel8",
          "rhacm-2.11.z:rhacm2/search-ui-rhel8",
          "rhacm-2.12.z:rhacm2/console-rhel8",
          "rhacm-2.12.z:rhacm2/console-ui-rhel8",
          "rhacm-2.12.z:rhacm2/search-ui-rhel8",
          "rhacm-2.13.z:rhacm2/console-rhel8",
          "rhacm-2.13.z:rhacm2/console-ui-rhel8",
          "rhacm-2.13.z:rhacm2/search-ui-rhel8",
          "rhacm-2.14:rhacm2/console-rhel8",
          "rhacm-2.14:rhacm2/console-ui-rhel8",
          "rhacm-2.14:rhacm2/search-ui-rhel8",
          "rhacm-2.15:rhacm2/console-rhel8",
          "rhacm-2.15:rhacm2/console-ui-rhel8",
          "rhacm-2.15:rhacm2/search-ui-rhel8"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-29060"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29060"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-29060"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "openshift-4.12.z:kibana.src",
            "openshift-4.12.z:openshift4/ose-logging-kibana6",
            "openshift-4.13.z:kibana.src",
            "openshift-4.13.z:openshift4/ose-logging-kibana6",
            "openshift-4.14.z:kibana.src",
            "openshift-4.14.z:openshift4/ose-logging-kibana6",
            "openshift-4.15.z:kibana.src",
            "openshift-4.15.z:openshift4/ose-logging-kibana6",
            "openshift-4.16.z:kibana.src",
            "openshift-4.16.z:openshift4/ose-logging-kibana6",
            "openshift-4.17:kibana.src",
            "openshift-4.17:openshift4/ose-logging-kibana6",
            "openshift-4.18:kibana.src",
            "openshift-4.18:openshift4/ose-logging-kibana6",
            "openshift-4.19:kibana.src",
            "openshift-4.19:openshift4/ose-logging-kibana6",
            "openshift-4.20:kibana.src",
            "openshift-4.20:openshift4/ose-logging-kibana6",
            "openshift-enterprise-3.11:kibana",
            "openshift-enterprise-3.11:kibana.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "maistra-1.1.3:servicemesh-grafana",
            "maistra-1.1.3:servicemesh-grafana-prometheus",
            "maistra-1.1.3:servicemesh-grafana.src",
            "maistra-1.1.3:servicemesh-prometheus",
            "maistra-1.1.3:servicemesh-prometheus.src",
            "openshift-4:openshift4/ose-grafana",
            "openshift-4:openshift4/ose-prometheus-rhel9",
            "openshift-4:openshift4/ose-thanos-rhel9",
            "quay-3.6:quay/quay-rhel8",
            "rhev-m-4:ovirt-engine-ui-extensions.src",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "ossm-2.0:servicemesh-prometheus",
            "ossm-2.0:servicemesh-prometheus.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "maistra-1.1.3:servicemesh-grafana",
            "maistra-1.1.3:servicemesh-grafana-prometheus",
            "maistra-1.1.3:servicemesh-grafana.src",
            "maistra-1.1.3:servicemesh-prometheus",
            "maistra-1.1.3:servicemesh-prometheus.src",
            "openshift-4.12.z:kibana.src",
            "openshift-4.12.z:openshift4/ose-logging-kibana6",
            "openshift-4.13.z:kibana.src",
            "openshift-4.13.z:openshift4/ose-logging-kibana6",
            "openshift-4.14.z:kibana.src",
            "openshift-4.14.z:openshift4/ose-logging-kibana6",
            "openshift-4.15.z:kibana.src",
            "openshift-4.15.z:openshift4/ose-logging-kibana6",
            "openshift-4.16.z:kibana.src",
            "openshift-4.16.z:openshift4/ose-logging-kibana6",
            "openshift-4.17:kibana.src",
            "openshift-4.17:openshift4/ose-logging-kibana6",
            "openshift-4.18:kibana.src",
            "openshift-4.18:openshift4/ose-logging-kibana6",
            "openshift-4.19:kibana.src",
            "openshift-4.19:openshift4/ose-logging-kibana6",
            "openshift-4.20:kibana.src",
            "openshift-4.20:openshift4/ose-logging-kibana6",
            "openshift-4:openshift4/ose-grafana",
            "openshift-4:openshift4/ose-prometheus-rhel9",
            "openshift-4:openshift4/ose-thanos-rhel9",
            "openshift-enterprise-3.11:kibana",
            "openshift-enterprise-3.11:kibana.src",
            "openshift-logging-5.8:openshift-logging/kibana6-rhel8",
            "openshift-logging-5.9:openshift-logging/kibana6-rhel8",
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "ossm-2.0:servicemesh-prometheus",
            "ossm-2.0:servicemesh-prometheus.src",
            "quay-3.6:quay/quay-rhel8",
            "rhacm-2.11.z:rhacm2/console-rhel8",
            "rhacm-2.11.z:rhacm2/console-ui-rhel8",
            "rhacm-2.11.z:rhacm2/search-ui-rhel8",
            "rhacm-2.12.z:rhacm2/console-rhel8",
            "rhacm-2.12.z:rhacm2/console-ui-rhel8",
            "rhacm-2.12.z:rhacm2/search-ui-rhel8",
            "rhacm-2.13.z:rhacm2/console-rhel8",
            "rhacm-2.13.z:rhacm2/console-ui-rhel8",
            "rhacm-2.13.z:rhacm2/search-ui-rhel8",
            "rhacm-2.14:rhacm2/console-rhel8",
            "rhacm-2.14:rhacm2/console-ui-rhel8",
            "rhacm-2.14:rhacm2/search-ui-rhel8",
            "rhacm-2.15:rhacm2/console-rhel8",
            "rhacm-2.15:rhacm2/console-ui-rhel8",
            "rhacm-2.15:rhacm2/search-ui-rhel8",
            "rhev-m-4:ovirt-engine-ui-extensions.src",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "maistra-1.1.3:servicemesh-grafana",
            "maistra-1.1.3:servicemesh-grafana-prometheus",
            "maistra-1.1.3:servicemesh-grafana.src",
            "maistra-1.1.3:servicemesh-prometheus",
            "maistra-1.1.3:servicemesh-prometheus.src",
            "openshift-4.12.z:kibana.src",
            "openshift-4.12.z:openshift4/ose-logging-kibana6",
            "openshift-4.13.z:kibana.src",
            "openshift-4.13.z:openshift4/ose-logging-kibana6",
            "openshift-4.14.z:kibana.src",
            "openshift-4.14.z:openshift4/ose-logging-kibana6",
            "openshift-4.15.z:kibana.src",
            "openshift-4.15.z:openshift4/ose-logging-kibana6",
            "openshift-4.16.z:kibana.src",
            "openshift-4.16.z:openshift4/ose-logging-kibana6",
            "openshift-4.17:kibana.src",
            "openshift-4.17:openshift4/ose-logging-kibana6",
            "openshift-4.18:kibana.src",
            "openshift-4.18:openshift4/ose-logging-kibana6",
            "openshift-4.19:kibana.src",
            "openshift-4.19:openshift4/ose-logging-kibana6",
            "openshift-4.20:kibana.src",
            "openshift-4.20:openshift4/ose-logging-kibana6",
            "openshift-4:openshift4/ose-grafana",
            "openshift-4:openshift4/ose-prometheus-rhel9",
            "openshift-4:openshift4/ose-thanos-rhel9",
            "openshift-enterprise-3.11:kibana",
            "openshift-enterprise-3.11:kibana.src",
            "rhev-m-4:ovirt-engine-ui-extensions.src",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        },
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "openshift-logging-5.8:openshift-logging/kibana6-rhel8",
            "openshift-logging-5.9:openshift-logging/kibana6-rhel8",
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "ossm-2.0:servicemesh-prometheus",
            "ossm-2.0:servicemesh-prometheus.src",
            "quay-3.6:quay/quay-rhel8",
            "rhacm-2.11.z:rhacm2/console-rhel8",
            "rhacm-2.11.z:rhacm2/console-ui-rhel8",
            "rhacm-2.11.z:rhacm2/search-ui-rhel8",
            "rhacm-2.12.z:rhacm2/console-rhel8",
            "rhacm-2.12.z:rhacm2/console-ui-rhel8",
            "rhacm-2.12.z:rhacm2/search-ui-rhel8",
            "rhacm-2.13.z:rhacm2/console-rhel8",
            "rhacm-2.13.z:rhacm2/console-ui-rhel8",
            "rhacm-2.13.z:rhacm2/search-ui-rhel8",
            "rhacm-2.14:rhacm2/console-rhel8",
            "rhacm-2.14:rhacm2/console-ui-rhel8",
            "rhacm-2.14:rhacm2/search-ui-rhel8",
            "rhacm-2.15:rhacm2/console-rhel8",
            "rhacm-2.15:rhacm2/console-ui-rhel8",
            "rhacm-2.15:rhacm2/search-ui-rhel8"
          ]
        }
      ],
      "title": "Regular expression denial of service when the application is provided and checks a crafted invalid HWB string"
    }
  ]
}