{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "ReDoS in .end() method",
    "tracking": {
      "current_release_date": "2026-08-17T07:27:46+00:00",
      "generator": {
        "date": "2026-08-17T07:27:46+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2021-33623",
      "initial_release_date": "2021-05-28T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T07:27:46+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Ansible Automation Platform 1.2",
            "product": {
              "name": "Red Hat Ansible Automation Platform 1.2",
              "product_id": "ansible_automation_platform-1.2",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:ansible_automation_platform"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cluster Observability Operator 1.5.0",
            "product": {
              "name": "Cluster Observability Operator 1.5.0",
              "product_id": "coo-1.5::el9",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.19",
            "product": {
              "name": "OpenShift Container Platform 4.19",
              "product_id": "openshift-4",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Service Mesh OSSM 2.0.0",
            "product": {
              "name": "OpenShift Service Mesh OSSM 2.0.0",
              "product_id": "ossm-2.0",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:service_mesh:2.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
              "product_id": "rhacm-2",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.3",
            "product": {
              "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.3",
              "product_id": "rhacm-2.3::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:acm:2.3::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Virtualization 4.4.0",
            "product": {
              "name": "Red Hat Enterprise Virtualization 4.4.0",
              "product_id": "rhev-m-4",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhev_manager:4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Virtualization 4.4.0",
            "product": {
              "name": "Red Hat Enterprise Virtualization 4.4.0",
              "product_id": "rhev-m-4.4.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhev_manager:4.4:el8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": {
              "name": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
              "product_id": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519",
              "product_identification_helper": {
                "purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@1782840519?repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9&tag=1782840519"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grc-ui-container-v2.3.0",
            "product": {
              "name": "grc-ui-container-v2.3.0",
              "product_id": "grc-ui-container-v2.3.0-0:100",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grc-ui-container-v2.3.0@100?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-grafana",
            "product": {
              "name": "openshift4/ose-grafana",
              "product_id": "openshift4/ose-grafana",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-grafana?repository_url=registry.redhat.io/openshift4/ose-grafana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-engine-ui-extensions",
            "product": {
              "name": "ovirt-engine-ui-extensions",
              "product_id": "ovirt-engine-ui-extensions.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-engine-ui-extensions?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui-0:1.9.0-1.el8ev",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui@1.9.0-1.el8ev?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui-0:1.9.0-1.el8ev.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui@1.9.0-1.el8ev?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ovirt-web-ui",
            "product": {
              "name": "ovirt-web-ui",
              "product_id": "ovirt-web-ui.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ovirt-web-ui?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/application-ui-rhel8",
            "product": {
              "name": "rhacm2/application-ui-rhel8",
              "product_id": "rhacm2/application-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/application-ui-rhel8?repository_url=registry.redhat.io/rhacm2/application-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-api-rhel8",
            "product": {
              "name": "rhacm2/console-api-rhel8",
              "product_id": "rhacm2/console-api-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-api-rhel8?repository_url=registry.redhat.io/rhacm2/console-api-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-header-rhel8",
            "product": {
              "name": "rhacm2/console-header-rhel8",
              "product_id": "rhacm2/console-header-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-header-rhel8?repository_url=registry.redhat.io/rhacm2/console-header-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-rhel8",
            "product": {
              "name": "rhacm2/console-rhel8",
              "product_id": "rhacm2/console-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-rhel8?repository_url=registry.redhat.io/rhacm2/console-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-ui-rhel8",
            "product": {
              "name": "rhacm2/console-ui-rhel8",
              "product_id": "rhacm2/console-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-ui-rhel8?repository_url=registry.redhat.io/rhacm2/console-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/grc-ui-rhel8",
            "product": {
              "name": "rhacm2/grc-ui-rhel8",
              "product_id": "rhacm2/grc-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/grc-ui-rhel8?repository_url=registry.redhat.io/rhacm2/grc-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/mcm-topology-rhel8",
            "product": {
              "name": "rhacm2/mcm-topology-rhel8",
              "product_id": "rhacm2/mcm-topology-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/mcm-topology-rhel8?repository_url=registry.redhat.io/rhacm2/mcm-topology-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/search-ui-rhel8",
            "product": {
              "name": "rhacm2/search-ui-rhel8",
              "product_id": "rhacm2/search-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/search-ui-rhel8?repository_url=registry.redhat.io/rhacm2/search-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana",
            "product": {
              "name": "servicemesh-grafana",
              "product_id": "servicemesh-grafana",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana-prometheus",
            "product": {
              "name": "servicemesh-grafana-prometheus",
              "product_id": "servicemesh-grafana-prometheus",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana-prometheus"
              }
            }
          },
          {
            "category": "product_version",
            "name": "servicemesh-grafana",
            "product": {
              "name": "servicemesh-grafana",
              "product_id": "servicemesh-grafana.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/servicemesh-grafana?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "trim-newlines",
            "product": {
              "name": "trim-newlines",
              "product_id": "trim-newlines.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/trim-newlines?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519 as a component of Cluster Observability Operator 1.5.0",
          "product_id": "coo-1.5::el9:cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519"
        },
        "product_reference": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519",
        "relates_to_product_reference": "coo-1.5::el9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grc-ui-container-v2.3.0-0:100 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.3",
          "product_id": "rhacm-2.3::el8:grc-ui-container-v2.3.0-0:100"
        },
        "product_reference": "grc-ui-container-v2.3.0-0:100",
        "relates_to_product_reference": "rhacm-2.3::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-grafana as a component of OpenShift Container Platform 4.19",
          "product_id": "openshift-4:openshift4/ose-grafana"
        },
        "product_reference": "openshift4/ose-grafana",
        "relates_to_product_reference": "openshift-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-engine-ui-extensions.src as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-engine-ui-extensions.src"
        },
        "product_reference": "ovirt-engine-ui-extensions.src",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-web-ui"
        },
        "product_reference": "ovirt-web-ui",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui-0:1.9.0-1.el8ev as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev"
        },
        "product_reference": "ovirt-web-ui-0:1.9.0-1.el8ev",
        "relates_to_product_reference": "rhev-m-4.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui-0:1.9.0-1.el8ev.src as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev.src"
        },
        "product_reference": "ovirt-web-ui-0:1.9.0-1.el8ev.src",
        "relates_to_product_reference": "rhev-m-4.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ovirt-web-ui.src as a component of Red Hat Enterprise Virtualization 4.4.0",
          "product_id": "rhev-m-4:ovirt-web-ui.src"
        },
        "product_reference": "ovirt-web-ui.src",
        "relates_to_product_reference": "rhev-m-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/application-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/application-ui-rhel8"
        },
        "product_reference": "rhacm2/application-ui-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-api-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/console-api-rhel8"
        },
        "product_reference": "rhacm2/console-api-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-header-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/console-header-rhel8"
        },
        "product_reference": "rhacm2/console-header-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/console-rhel8"
        },
        "product_reference": "rhacm2/console-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/console-ui-rhel8"
        },
        "product_reference": "rhacm2/console-ui-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/grc-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/grc-ui-rhel8"
        },
        "product_reference": "rhacm2/grc-ui-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/mcm-topology-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/mcm-topology-rhel8"
        },
        "product_reference": "rhacm2/mcm-topology-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/search-ui-rhel8 as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.7.0",
          "product_id": "rhacm-2:rhacm2/search-ui-rhel8"
        },
        "product_reference": "rhacm2/search-ui-rhel8",
        "relates_to_product_reference": "rhacm-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana"
        },
        "product_reference": "servicemesh-grafana",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana-prometheus as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana-prometheus"
        },
        "product_reference": "servicemesh-grafana-prometheus",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "servicemesh-grafana.src as a component of OpenShift Service Mesh OSSM 2.0.0",
          "product_id": "ossm-2.0:servicemesh-grafana.src"
        },
        "product_reference": "servicemesh-grafana.src",
        "relates_to_product_reference": "ossm-2.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "trim-newlines.src as a component of Red Hat Ansible Automation Platform 1.2",
          "product_id": "ansible_automation_platform-1.2:trim-newlines.src"
        },
        "product_reference": "trim-newlines.src",
        "relates_to_product_reference": "ansible_automation_platform-1.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-33623",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-05-28T00:00:00+00:00",
      "notes": [
        {
          "category": "other",
          "text": "OpenShift Container Platform (OCP) grafana-container does package a vulnerable verison of nodejs trim-newlines. However due to the instance being read only and behind OpenShift OAuth, the impact by this vulnerability is Low. Red Hat Advanced Cluster Management for Kubernetes (ACM) containers affected by this flaw are only accessible to authenticated users, thus the impact of this vulnerability is Low. \nRed Hat Virtualization (RHV) does package a vulnerable version of nodejs-trim-newlines. However, no untrusted content is being parsed therefore the impact of this vulnerability is Low.\n\nThe hosted services are shipped with the vulnerable packages, however the vulnerable methods were not identified in use at this time.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "coo-1.5::el9:cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519",
          "rhacm-2.3::el8:grc-ui-container-v2.3.0-0:100",
          "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev",
          "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev.src"
        ],
        "known_affected": [
          "ansible_automation_platform-1.2:trim-newlines.src",
          "openshift-4:openshift4/ose-grafana",
          "ossm-2.0:servicemesh-grafana",
          "ossm-2.0:servicemesh-grafana-prometheus",
          "ossm-2.0:servicemesh-grafana.src",
          "rhacm-2:rhacm2/application-ui-rhel8",
          "rhacm-2:rhacm2/console-api-rhel8",
          "rhacm-2:rhacm2/console-header-rhel8",
          "rhacm-2:rhacm2/console-rhel8",
          "rhacm-2:rhacm2/console-ui-rhel8",
          "rhacm-2:rhacm2/grc-ui-rhel8",
          "rhacm-2:rhacm2/mcm-topology-rhel8",
          "rhacm-2:rhacm2/search-ui-rhel8",
          "rhev-m-4:ovirt-engine-ui-extensions.src",
          "rhev-m-4:ovirt-web-ui",
          "rhev-m-4:ovirt-web-ui.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-33623"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33623"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33623"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "openshift-4:openshift4/ose-grafana",
            "rhacm-2:rhacm2/application-ui-rhel8",
            "rhacm-2:rhacm2/console-header-rhel8",
            "rhacm-2:rhacm2/console-rhel8",
            "rhacm-2:rhacm2/console-ui-rhel8",
            "rhacm-2:rhacm2/mcm-topology-rhel8",
            "rhacm-2:rhacm2/search-ui-rhel8",
            "rhev-m-4:ovirt-engine-ui-extensions.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "ansible_automation_platform-1.2:trim-newlines.src",
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "rhacm-2:rhacm2/console-api-rhel8",
            "rhacm-2:rhacm2/grc-ui-rhel8",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2021-08-06T00:48:52+00:00",
          "details": "Apply advisory RHSA-2021:3016 as per vendors instructions.",
          "product_ids": [
            "rhacm-2.3::el8:grc-ui-container-v2.3.0-0:100"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:3016"
        },
        {
          "category": "vendor_fix",
          "date": "2022-07-14T12:56:49+00:00",
          "details": "Apply advisory RHSA-2022:5555 as per vendors instructions.",
          "product_ids": [
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev",
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2022:5555"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-01T14:36:53+00:00",
          "details": "Apply advisory RHSA-2026:34342 as per vendors instructions.",
          "product_ids": [
            "coo-1.5::el9:cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:34342"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          },
          "products": [
            "ansible_automation_platform-1.2:trim-newlines.src",
            "coo-1.5::el9:cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519",
            "openshift-4:openshift4/ose-grafana",
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "rhacm-2.3::el8:grc-ui-container-v2.3.0-0:100",
            "rhacm-2:rhacm2/application-ui-rhel8",
            "rhacm-2:rhacm2/console-api-rhel8",
            "rhacm-2:rhacm2/console-header-rhel8",
            "rhacm-2:rhacm2/console-rhel8",
            "rhacm-2:rhacm2/console-ui-rhel8",
            "rhacm-2:rhacm2/grc-ui-rhel8",
            "rhacm-2:rhacm2/mcm-topology-rhel8",
            "rhacm-2:rhacm2/search-ui-rhel8",
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev",
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev.src",
            "rhev-m-4:ovirt-engine-ui-extensions.src",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "openshift-4:openshift4/ose-grafana",
            "rhacm-2:rhacm2/application-ui-rhel8",
            "rhacm-2:rhacm2/console-api-rhel8",
            "rhacm-2:rhacm2/console-header-rhel8",
            "rhacm-2:rhacm2/console-rhel8",
            "rhacm-2:rhacm2/console-ui-rhel8",
            "rhacm-2:rhacm2/grc-ui-rhel8",
            "rhacm-2:rhacm2/mcm-topology-rhel8",
            "rhacm-2:rhacm2/search-ui-rhel8",
            "rhev-m-4:ovirt-engine-ui-extensions.src",
            "rhev-m-4:ovirt-web-ui",
            "rhev-m-4:ovirt-web-ui.src"
          ]
        },
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "ansible_automation_platform-1.2:trim-newlines.src",
            "coo-1.5::el9:cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9-0:1782840519",
            "ossm-2.0:servicemesh-grafana",
            "ossm-2.0:servicemesh-grafana-prometheus",
            "ossm-2.0:servicemesh-grafana.src",
            "rhacm-2.3::el8:grc-ui-container-v2.3.0-0:100",
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev",
            "rhev-m-4.4.z:ovirt-web-ui-0:1.9.0-1.el8ev.src"
          ]
        }
      ],
      "title": "ReDoS in .end() method"
    }
  ]
}