{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40984.json"
      }
    ],
    "title": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests",
    "tracking": {
      "current_release_date": "2026-08-12T19:39:22+00:00",
      "generator": {
        "date": "2026-08-12T19:39:22+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "CVE-2026-40984",
      "initial_release_date": "2026-06-09T03:47:46.447000+00:00",
      "revision_history": [
        {
          "date": "2026-06-09T03:47:46.447000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-10T11:00:52.758843+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-08-12T19:39:22+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ Broker 7",
                "product": {
                  "name": "Red Hat AMQ Broker 7",
                  "product_id": "red_hat_amq_broker_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_broker:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AMQ Broker 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ Clients",
                "product": {
                  "name": "Red Hat AMQ Clients",
                  "product_id": "red_hat_amq_clients",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_clients:2023"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AMQ Clients"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apache Camel 4 for Quarkus 3",
                "product": {
                  "name": "Red Hat build of Apache Camel 4 for Quarkus 3",
                  "product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:camel_quarkus:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Apache Camel 4 for Quarkus 3"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apache Camel - HawtIO 4",
                "product": {
                  "name": "Red Hat build of Apache Camel - HawtIO 4",
                  "product_id": "red_hat_build_of_apache_camel_-_hawtio_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_hawtio:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Apache Camel - HawtIO 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apicurio Registry 3",
                "product": {
                  "name": "Red Hat build of Apicurio Registry 3",
                  "product_id": "red_hat_build_of_apicurio_registry_3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apicurio_registry:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Apicurio Registry 3"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Debezium 3",
                "product": {
                  "name": "Red Hat build of Debezium 3",
                  "product_id": "red_hat_build_of_debezium_3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:debezium:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Debezium 3"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of OptaPlanner 8",
                "product": {
                  "name": "Red Hat build of OptaPlanner 8",
                  "product_id": "red_hat_build_of_optaplanner_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:optaplanner:::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of OptaPlanner 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Quarkus",
                "product": {
                  "name": "Red Hat build of Quarkus",
                  "product_id": "red_hat_build_of_quarkus",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quarkus:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Quarkus"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Fuse 7",
                "product": {
                  "name": "Red Hat Fuse 7",
                  "product_id": "red_hat_fuse_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_fuse:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Fuse 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                  "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jbosseapxp"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift AI (RHOAI)",
                "product": {
                  "name": "Red Hat OpenShift AI (RHOAI)",
                  "product_id": "red_hat_openshift_ai_(rhoai)",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_ai"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift AI (RHOAI)"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Dev Spaces",
                "product": {
                  "name": "Red Hat OpenShift Dev Spaces",
                  "product_id": "red_hat_openshift_dev_spaces",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_devspaces:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Dev Spaces"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Process Automation 7",
                "product": {
                  "name": "Red Hat Process Automation 7",
                  "product_id": "red_hat_process_automation_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Process Automation 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "streams for Apache Kafka 2",
                "product": {
                  "name": "streams for Apache Kafka 2",
                  "product_id": "streams_for_apache_kafka_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "streams for Apache Kafka 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Streams for Apache Kafka 3.2.1",
                "product": {
                  "name": "Streams for Apache Kafka 3.2.1",
                  "product_id": "Streams for Apache Kafka 3.2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:3.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.6",
                "product": {
                  "name": "Red Hat build of Keycloak 26.6",
                  "product_id": "9Base-RHBK-26.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.6.5",
                "product": {
                  "name": "Red Hat build of Keycloak 26.6.5",
                  "product_id": "Red Hat build of Keycloak 26.6.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Keycloak"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Data Grid 8.6.2",
                "product": {
                  "name": "Red Hat Data Grid 8.6.2",
                  "product_id": "Red Hat Data Grid 8.6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_data_grid:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Data Grid"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
                "product": {
                  "name": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
                  "product_id": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.18"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
                "product": {
                  "name": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
                  "product_id": "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_quarkus:3.33"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Build of Apache Camel"
          },
          {
            "category": "product_version",
            "name": "micrometer-core",
            "product": {
              "name": "micrometer-core",
              "product_id": "micrometer-core",
              "product_identification_helper": {
                "purl": "pkg:maven/io.micrometer/micrometer-core"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-trustyai-service-rhel9",
            "product": {
              "name": "rhoai/odh-trustyai-service-rhel9",
              "product_id": "rhoai/odh-trustyai-service-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-trustyai-service-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "devspaces/openvsx-rhel9",
            "product": {
              "name": "devspaces/openvsx-rhel9",
              "product_id": "devspaces/openvsx-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/openvsx-rhel9?repository_url=registry.redhat.io/devspaces/openvsx-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "devspaces/pluginregistry-rhel9",
            "product": {
              "name": "devspaces/pluginregistry-rhel9",
              "product_id": "devspaces/pluginregistry-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/pluginregistry-rhel9?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "devspaces/server-rhel9",
            "product": {
              "name": "devspaces/server-rhel9",
              "product_id": "devspaces/server-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/server-rhel9?repository_url=registry.redhat.io/devspaces/server-rhel9"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.6.5-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.6-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.6-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat AMQ Broker 7",
          "product_id": "red_hat_amq_broker_7:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_amq_broker_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat AMQ Clients",
          "product_id": "red_hat_amq_clients:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_amq_clients"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of Apache Camel - HawtIO 4",
          "product_id": "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
          "product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of Apicurio Registry 3",
          "product_id": "red_hat_build_of_apicurio_registry_3:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_apicurio_registry_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of Debezium 3",
          "product_id": "red_hat_build_of_debezium_3:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_debezium_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of OptaPlanner 8",
          "product_id": "red_hat_build_of_optaplanner_8:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_optaplanner_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat build of Quarkus",
          "product_id": "red_hat_build_of_quarkus:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_build_of_quarkus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat Fuse 7",
          "product_id": "red_hat_fuse_7:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_fuse_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
          "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9"
        },
        "product_reference": "rhoai/odh-trustyai-service-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces",
          "product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9"
        },
        "product_reference": "devspaces/openvsx-rhel9",
        "relates_to_product_reference": "red_hat_openshift_dev_spaces"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces",
          "product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9"
        },
        "product_reference": "devspaces/pluginregistry-rhel9",
        "relates_to_product_reference": "red_hat_openshift_dev_spaces"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "devspaces/server-rhel9 as a component of Red Hat OpenShift Dev Spaces",
          "product_id": "red_hat_openshift_dev_spaces:devspaces/server-rhel9"
        },
        "product_reference": "devspaces/server-rhel9",
        "relates_to_product_reference": "red_hat_openshift_dev_spaces"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of Red Hat Process Automation 7",
          "product_id": "red_hat_process_automation_7:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "red_hat_process_automation_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "micrometer-core as a component of streams for Apache Kafka 2",
          "product_id": "streams_for_apache_kafka_2:micrometer-core"
        },
        "product_reference": "micrometer-core",
        "relates_to_product_reference": "streams_for_apache_kafka_2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40984",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-09T05:01:51.700197+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2486716"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service vulnerability in Micrometer, a component present in several Red Hat products. A remote, unauthenticated attacker can exploit this flaw by sending specially crafted HTTP requests, leading to resource exhaustion and disrupting the availability of affected services. Exploitation of this flaw requires one or more HTTP server instrumentation(s), from one of the vulnerable components, to be configured to record metrics.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
          "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
          "Red Hat Data Grid 8.6.2",
          "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
          "Red Hat build of Keycloak 26.6.5",
          "Streams for Apache Kafka 3.2.1"
        ],
        "known_affected": [
          "red_hat_amq_broker_7:micrometer-core",
          "red_hat_amq_clients:micrometer-core",
          "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core",
          "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core",
          "red_hat_build_of_apicurio_registry_3:micrometer-core",
          "red_hat_build_of_debezium_3:micrometer-core",
          "red_hat_build_of_optaplanner_8:micrometer-core",
          "red_hat_build_of_quarkus:micrometer-core",
          "red_hat_fuse_7:micrometer-core",
          "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core",
          "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
          "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
          "red_hat_openshift_dev_spaces:devspaces/server-rhel9",
          "red_hat_process_automation_7:micrometer-core",
          "streams_for_apache_kafka_2:micrometer-core"
        ],
        "known_not_affected": [
          "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40984"
        },
        {
          "category": "external",
          "summary": "RHBZ#2486716",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40984",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40984"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984"
        },
        {
          "category": "external",
          "summary": "https://spring.io/security/cve-2026-40984",
          "url": "https://spring.io/security/cve-2026-40984"
        }
      ],
      "release_date": "2026-06-09T03:47:46.447000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T16:20:31+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:50849"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-08T18:28:22+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:36839"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-20T11:56:31+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Data Grid 8.6.2"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:41951"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-09T15:29:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:37390"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-05T16:17:28+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.6.5"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:50848"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-12T19:35:14+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 3.2.1"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:54435"
        },
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "red_hat_fuse_7:micrometer-core",
            "red_hat_openshift_dev_spaces:devspaces/server-rhel9"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "red_hat_build_of_debezium_3:micrometer-core",
            "red_hat_build_of_optaplanner_8:micrometer-core",
            "red_hat_process_automation_7:micrometer-core"
          ]
        },
        {
          "category": "none_available",
          "details": "Fix deferred",
          "product_ids": [
            "streams_for_apache_kafka_2:micrometer-core"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "red_hat_amq_broker_7:micrometer-core",
            "red_hat_amq_clients:micrometer-core",
            "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core",
            "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core",
            "red_hat_build_of_apicurio_registry_3:micrometer-core",
            "red_hat_build_of_quarkus:micrometer-core",
            "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core",
            "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
            "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
            "Red Hat Data Grid 8.6.2",
            "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
            "Red Hat build of Keycloak 26.6.5",
            "Streams for Apache Kafka 3.2.1",
            "red_hat_amq_broker_7:micrometer-core",
            "red_hat_amq_clients:micrometer-core",
            "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core",
            "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core",
            "red_hat_build_of_apicurio_registry_3:micrometer-core",
            "red_hat_build_of_debezium_3:micrometer-core",
            "red_hat_build_of_optaplanner_8:micrometer-core",
            "red_hat_build_of_quarkus:micrometer-core",
            "red_hat_fuse_7:micrometer-core",
            "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/server-rhel9",
            "red_hat_process_automation_7:micrometer-core",
            "streams_for_apache_kafka_2:micrometer-core"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:06ee2f18c4218c9a095360efa2023b2080aa81e04a08363dbcb1d14de85a5d0d_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:0024d9a0b69b61004a0d35ee25eefc443fe75ce2563b1645ec318caacc0aa23c_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:2eeef9cec3ee8e3cfdb1c4b7377582b4a5378f852e11872eeb74597ad9ec0615_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:37c7d8c5b4bd9649b3da2c0929075c6bd311361667a7eb25eb3f52927b7eca8e_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:aadf59a1eeb8e64f2f1eea906dd1837fd144d8406b07630a3e2b0c9265c107e7_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:30a9118cf874444aabdf4dd8f84d44cb503f89d8432a652fbb0ba860d3815c4d_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7b668bfd2a9a1bd6343fb2e802912eaa72bd7043fa5be6e0a6edc06894c74b63_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:83e1c37e7e5b268c8b516f9c13d064db4fbdcd68d25a542dec0d237665b06705_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:c8203365ded9864afe84f579798eefd5f4a79ee6a4e585e47fcb0d8ea3ce959f_s390x",
            "Red Hat Build of Apache Camel 4.18 for Quarkus 3.33",
            "Red Hat Data Grid 8.6.2",
            "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
            "Red Hat build of Keycloak 26.6.5",
            "Streams for Apache Kafka 3.2.1",
            "red_hat_amq_broker_7:micrometer-core",
            "red_hat_amq_clients:micrometer-core",
            "red_hat_build_of_apache_camel_-_hawtio_4:micrometer-core",
            "red_hat_build_of_apache_camel_4_for_quarkus_3:micrometer-core",
            "red_hat_build_of_apicurio_registry_3:micrometer-core",
            "red_hat_build_of_debezium_3:micrometer-core",
            "red_hat_build_of_optaplanner_8:micrometer-core",
            "red_hat_build_of_quarkus:micrometer-core",
            "red_hat_fuse_7:micrometer-core",
            "red_hat_jboss_enterprise_application_platform_expansion_pack:micrometer-core",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
            "red_hat_openshift_dev_spaces:devspaces/server-rhel9",
            "red_hat_process_automation_7:micrometer-core",
            "streams_for_apache_kafka_2:micrometer-core"
          ]
        }
      ],
      "title": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests"
    }
  ]
}