{"id":"EUVD-2026-81261","enisaUuid":"a7d26d28-d777-3164-807a-82a35b70bdca","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor wraps the exporter with newBufferExporter(exporter, 1), and the poll loop calls queue.TryDequeue and bufferExporter.EnqueueExport before immediately signaling pollTrigger whenever the queue remains at or above batchSize. Because a failed nonblocking EnqueueExport leaves the queue length unchanged, the processor repeatedly retries without waiting for its ticker, exhausting CPU and degrading or denying service in the embedding process. This issue is fixed in version 0.21.0.","datePublished":"Sep 16, 2026, 8:42:23 PM","dateUpdated":"Sep 17, 2026, 1:36:27 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65\nhttps://github.com/open-telemetry/opentelemetry-go/issues/6797\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8620\nhttps://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0\n","aliases":"CVE-2026-81872\nGHSA-hjf4-fphr-2h65\n","assigner":"GitHub_M","epss":0.38,"enisaIdProduct":[{"id":"6111ea85-3a93-30bc-8910-eb68a9312dcc","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.21.0"}],"enisaIdVendor":[{"id":"6166cc20-eee2-37d0-bede-fabdde8b2c90","vendor":{"name":"open-telemetry"}}],"enisaIdVulnerability":[{"id":"4be9347c-c359-314b-94d9-330b77b4760c","vulnerability":{"id":"GHSA-hjf4-fphr-2h65","description":"OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full","datePublished":"Sep 29, 2026, 5:59:53 PM","dateUpdated":"Sep 29, 2026, 5:59:53 PM","baseScore":0.0,"references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81872\nhttps://github.com/open-telemetry/opentelemetry-go/issues/6797\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8620\nhttps://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582\nhttps://github.com/open-telemetry/opentelemetry-go\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0\n","enisa_id":"EUVD-2026-81261\n","aliases":"CVE-2026-81872\nGHSA-hjf4-fphr-2h65\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6d1790bc-e382-31b5-9dae-760be4089e9e","vulnerability":{"id":"CVE-2026-81872","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor wraps the exporter with newBufferExporter(exporter, 1), and the poll loop calls queue.TryDequeue and bufferExporter.EnqueueExport before immediately signaling pollTrigger whenever the queue remains at or above batchSize. Because a failed nonblocking EnqueueExport leaves the queue length unchanged, the processor repeatedly retries without waiting for its ticker, exhausting CPU and degrading or denying service in the embedding process. This issue is fixed in version 0.21.0.","datePublished":"Sep 16, 2026, 8:42:23 PM","dateUpdated":"Sep 17, 2026, 1:36:27 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65\nhttps://github.com/open-telemetry/opentelemetry-go/issues/6797\nhttps://github.com/open-telemetry/opentelemetry-go/pull/8620\nhttps://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0\n","enisa_id":"EUVD-2026-81261\n","assigner":"GitHub_M","epss":0.38,"dataProcessed":"Nov 11, 2026, 7:26:12 AM","vulnerabilityProduct":[{"id":"ded2b1f8-bee0-379f-a1ea-8664a1041220","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.21.0"}],"vulnerabilityVendor":[{"id":"0191fad0-e72b-3df1-ad74-2d2f300a45a7","vendor":{"name":"open-telemetry"}}]}}],"enisaIdAdvisory":[{"id":"06f9eb8d-b32f-3517-a4d8-5b30bc91eb0a","advisory":{"id":"SUSE-SU-2026:23973-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 15, 2026, 5:13:23 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23973-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"21607737-4e66-3f06-a45a-29f2f23b02a8","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"400dba31-2ec6-36d4-991f-7c0b5bd6e80b","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6ce9aae9-e277-3370-b5a4-56aba23ffb55","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7a97ab71-4b96-39bc-aa3b-ee89a5c15ede","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a71f8e6d-207d-3f79-97a2-f016451fea1e","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"b6ae4ad5-fb06-300a-8fd8-11bc2693f1e5","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"076cc691-b120-3d54-a64d-f2fc465644f4","advisory":{"id":"RHSA-2026:68926","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:38:27 PM","dateUpdated":"Nov 7, 2026, 11:39:51 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68926\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68926.json\n","aliases":"CVE-2026-14199\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"8d977062-b81d-35c8-bfac-21a7965846dc","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c7b92c05-0073-3464-bb70-6624f6ea2cce","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"e2e34a77-8a5a-33c7-a6f7-4722af41f726","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f7f82093-18f0-305e-8d0a-48b86128b23a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"07d58a7e-4f1c-3144-8ecb-ebfd057ba1ea","advisory":{"id":"RHSA-2026:68905","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:25:38 PM","dateUpdated":"Nov 7, 2026, 5:51:19 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68905\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68905.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"38aa77bd-d222-3fff-8ae0-47a1a3ba028f","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"52931eae-bcd5-3f59-92b7-2d1152af5490","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"60489344-d33f-3f1f-b303-f8ef34d73d3f","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"67645c2c-7d52-38ca-ad62-069a819b808b","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"0cd8c921-f7fa-3d69-8dda-f5308d193763","advisory":{"id":"RHSA-2026:68821","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 8:52:34 AM","dateUpdated":"Nov 7, 2026, 5:54:18 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68821\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68821.json\n","aliases":"CVE-2026-28374\nCVE-2026-28376\nCVE-2026-28379\nCVE-2026-28380\nCVE-2026-28383\nCVE-2026-33376\nCVE-2026-33377\nCVE-2026-33378\nCVE-2026-33380\nCVE-2026-33381\nCVE-2026-61709\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"4faa3e93-b0e4-3142-a4dd-0efdce2801d5","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"90110a57-b772-398d-a6a1-1e91df1b5775","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"92ea09f5-c22f-3d5c-9eec-4fe63d6a3cb6","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"9daa4070-1188-3c18-8fdf-8f0b504e248f","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"136f746d-8f7e-3a32-a9fe-1c7f2d01b029","advisory":{"id":"RHSA-2026:68290","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 16, 2026, 3:39:07 PM","dateUpdated":"Nov 7, 2026, 5:58:11 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68290\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68290.json\n","aliases":"CVE-2026-63209\nCVE-2026-77403\nCVE-2026-77404\nCVE-2026-77406\nCVE-2026-77407\nCVE-2026-77409\nCVE-2026-77410\nCVE-2026-77412\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"590005fb-c0c4-383d-bdad-6c6cc3652a29","product":{"name":"opentelemetry-collector-contrib-0:0.161.0-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"c5e87b97-2ed4-37c8-8000-7a4d48dd3bb0","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e9a2703b-8768-388d-b268-d9482cfb3375","product":{"name":"opentelemetry-collector-contrib-0:0.161.0-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f0529970-0b85-31d3-a4da-a43543a26fc5","product":{"name":"opentelemetry-collector-contrib-0:0.161.0-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"14f4b258-7bd6-3614-87ab-88fa87755751","advisory":{"id":"RHSA-2026:68272","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 16, 2026, 3:29:51 PM","dateUpdated":"Nov 7, 2026, 5:50:36 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68272\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68272.json\n","aliases":"CVE-2026-63209\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1daa91e5-912b-335b-9ccb-064599375294","product":{"name":"opentelemetry-collector-0:0.161.0-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"2da50ca8-2e0e-3a65-8411-9888b4a1ea2c","product":{"name":"opentelemetry-collector-0:0.161.0-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"43890b22-4ca6-326a-8568-fff1470397d8","product":{"name":"opentelemetry-collector-0:0.161.0-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d853d1f2-3226-3383-a3c8-8c533360feaa","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"19ec3cce-909c-3b80-86c5-96f778511222","advisory":{"id":"RHSA-2026:68717","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:07:28 PM","dateUpdated":"Nov 7, 2026, 5:50:09 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68717\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68717.json\n","aliases":"CVE-2026-56851\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"51b0617f-f96e-37b1-9242-4c5c90878eff","product":{"name":"helm3-0:3.22.0-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6634e34-03b9-333a-ac4c-b4ad35679dd6","product":{"name":"helm3-0:3.22.0-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"cad2741a-7834-3ed5-8c3d-a640f65f76e7","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e930bc6b-dc6f-3f51-92f0-5cbcf94fadf7","product":{"name":"helm3-0:3.22.0-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"25d1de35-da96-38b1-950b-affb699e21aa","advisory":{"id":"openSUSE-SU-2026:11875-1","description":"helm-4.3.0-3.1 on GA media","summary":"helm-4.3.0-3.1 on GA media","datePublished":"Sep 24, 2026, 12:00:00 AM","dateUpdated":"Sep 25, 2026, 8:57:17 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11875-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"02c6a161-1184-340e-8550-b8dc6ca97959","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"146a24bb-0659-34ef-a900-b34bcd7464d6","product":{"name":"helm-bash-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2cf017b9-5c91-367a-bb17-f02f3f30c33b","product":{"name":"helm-bash-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3bf0f600-596d-329a-8b5a-2b1de2cc6240","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"41881fdd-cbc0-3bd2-b5e8-2d8866df819f","product":{"name":"helm-fish-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4c593f35-cc4d-3756-8c6a-58490e2f4e28","product":{"name":"helm-fish-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4d59d30a-9311-3bfd-9977-8142b0954ffd","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"524c131d-5c4c-329d-ad39-be3d6902bb73","product":{"name":"helm-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5cf24ce9-f519-3abc-a2c1-ea1aa4973878","product":{"name":"helm-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5f75347c-c0b9-3b79-bddc-bd95b5c6ff4d","product":{"name":"helm-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"618689e3-b36e-311a-a9a4-79fcd7bf3b59","product":{"name":"helm-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"66d862d7-104e-3a83-aeb3-6659bec2c60b","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"69a6dd78-04f3-3f01-878b-47258bb81f97","product":{"name":"helm-bash-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"70635a56-403b-32b9-8d90-d417ce990b38","product":{"name":"helm-fish-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b70fbf1a-89e7-3c9f-b1b0-fda661f90abf","product":{"name":"helm-bash-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c211629c-c8fd-31f2-b787-2eb16bf4123f","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c51af447-5524-3495-a6b8-9d02c6e69024","product":{"name":"helm-fish-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"2a76985e-3f0e-3155-a3fc-82b842a28153","advisory":{"id":"RHSA-2026:68910","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:27:12 PM","dateUpdated":"Nov 7, 2026, 5:51:18 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68910\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68910.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"bdb61ae2-8f26-3f1a-a842-dfb771580ade","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"ca066f80-cec2-38bd-a47c-641b8db840b0","product":{"name":"jaeger-0:2.20.0-0.9.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"da323a3d-ccb3-39c9-ab4f-e059e9f5fabf","product":{"name":"jaeger-0:2.20.0-0.9.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ff1784c0-1290-3b2b-942d-b32a02a40bab","product":{"name":"jaeger-0:2.20.0-0.9.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"327fcc3a-5cf5-3188-a99f-1047f253f27b","advisory":{"id":"openSUSE-SU-2026:12114-1","description":"alloy-1.20.1-1.1 on GA media","summary":"alloy-1.20.1-1.1 on GA media","datePublished":"Oct 13, 2026, 12:00:00 AM","dateUpdated":"Oct 14, 2026, 10:28:19 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12114-1.json\nhttps://www.suse.com/security/cve/CVE-2026-14362/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-84303/\nhttps://www.suse.com/security/cve/CVE-2026-84304/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\n","aliases":"CVE-2026-14362\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-84303\nCVE-2026-84304\nCVE-2026-84445\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"156dde35-2718-3da9-812c-a95936086c3c","product":{"name":"alloy-0:1.20.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3cd134cd-7fe7-3933-8bb2-3ae6d1600159","product":{"name":"alloy-0:1.20.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5cb4cbcb-4090-3e1a-8731-2070bb104238","product":{"name":"alloy-0:1.20.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e3f031f6-9d33-35d6-af1a-01baeeaed840","product":{"name":"alloy-0:1.20.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fe4d15f8-6d8b-3a0e-b6bc-53a8bc14e479","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}}]}},{"id":"3885d5a8-ecda-32e2-84af-c060d1b2a112","advisory":{"id":"RHSA-2026:68715","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:04:33 PM","dateUpdated":"Nov 7, 2026, 5:51:27 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68715\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68715.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"95ca56c2-90aa-31ef-876b-7d81d3c11800","product":{"name":"caddy-0:2.11.4-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a87f0e38-d049-3e44-a01f-4a9ac08a9f97","product":{"name":"caddy-0:2.11.4-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cb8075e7-7c23-3d2a-8ef7-34f123e642c4","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"df0974fa-a0d7-39d8-a604-af4b07237ef6","product":{"name":"caddy-0:2.11.4-0.4.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"3d6fdfa3-775e-3a8b-908d-4de21c56ae0e","advisory":{"id":"RHSA-2026:68778","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 9:04:02 PM","dateUpdated":"Nov 7, 2026, 5:53:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68778\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68778.json\n","aliases":"CVE-2026-28374\nCVE-2026-28376\nCVE-2026-28379\nCVE-2026-28380\nCVE-2026-28383\nCVE-2026-33376\nCVE-2026-33377\nCVE-2026-33378\nCVE-2026-33380\nCVE-2026-33381\nCVE-2026-42127\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1f860e20-9ae1-3d57-a0ea-9df7841648f3","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"2cb1e5d4-9db4-3bad-802c-7e81c6314aac","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"96fdcc0e-3f75-3bc6-a994-02ed881ddeb7","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f46aef19-3f1a-3c5d-a07c-2fd261b718e7","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"41e2cd4c-56c3-337d-a50f-1e8a003af865","advisory":{"id":"RHSA-2026:68716","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:05:49 PM","dateUpdated":"Nov 7, 2026, 5:51:23 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68716\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68716.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"21cd840c-68c1-3377-bd14-b166e1f483ea","product":{"name":"distribution-0:3.1.1-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"808df4a2-53d7-38fb-8568-8265feba8be1","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"92bf9dc6-7bcf-3634-8ed1-3e09c30e835c","product":{"name":"distribution-0:3.1.1-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"df985732-64d4-3e83-966c-065fb954ea88","product":{"name":"distribution-0:3.1.1-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"4f2c93ad-e2ce-3557-a063-9c014bf8a109","advisory":{"id":"openSUSE-SU-2026:11892-1","description":"helm3-3.22.0-2.1 on GA media","summary":"helm3-3.22.0-2.1 on GA media","datePublished":"Sep 28, 2026, 12:00:00 AM","dateUpdated":"Sep 29, 2026, 8:22:54 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11892-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0a407bc6-37ef-36bf-a921-6feea806f0d8","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0d9bd7cf-a4b5-3b1b-9fa7-765781bff7b9","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"3297da89-a6c4-37df-b690-be61ed9e014d","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"34514447-32f5-3cb9-a730-fa6d6e858f8a","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"360d24cc-e40b-37b0-9cdd-64af201ad07f","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"440d63e8-3b39-3915-8673-5f819df28859","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"52c6f9fc-b774-3edb-bda5-2d7e073c3edf","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"61f4480c-6b6f-3f94-a8ef-986045df4c05","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"69fb1563-e772-3583-b55f-ea7ffd358232","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a82cba9-5bf7-325c-bd37-d11127878435","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7b4c6979-a8a5-378c-a928-fb7b1ccc059c","product":{"name":"helm3-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"997b6960-463c-3179-bd2e-6e2bb8fa233e","product":{"name":"helm3-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a863db7f-9ac9-3f04-9f55-5d487bad0d9d","product":{"name":"helm3-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b0291c30-8058-3819-a599-4a868e778b99","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b9234405-61ea-346d-8f8e-a47011cc60a3","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e41b7531-baae-320a-8202-f512ea5e3880","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f9dfa1cb-bd99-3b40-96cd-8e63bfd3a513","product":{"name":"helm3-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"57993b9e-7f60-3de9-bc57-3abeb5746487","advisory":{"id":"SUSE-SU-2026:23990-1","description":"Security update for distribution","summary":"Security update for distribution","datePublished":"Oct 1, 2026, 12:12:02 PM","dateUpdated":"Oct 5, 2026, 4:59:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23990-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"3590833b-cae4-3d4b-8050-197d69b7eeaa","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3b2dcbff-128b-368b-a4dc-096a130b7a61","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b435348-515a-3e06-a3fd-1be0a6598cdd","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b2833161-1236-3f25-a8dc-a8d82eb29c4b","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"ccbbe62e-801c-3691-9dad-0e2077cd1b7a","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"fcb6e76a-522f-33e4-9933-3bcc7419217b","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"62e4edcd-58ef-351f-8974-f93f96f67927","advisory":{"id":"RHSA-2026:68591","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 10:22:46 AM","dateUpdated":"Nov 7, 2026, 5:58:10 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68591\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68591.json\n","aliases":"CVE-2026-63209\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"09be3d6b-f114-3329-b922-851ac933493b","product":{"name":"opentelemetry-collector-k8s-0:0.161.0-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"1288cd2e-bcd2-3702-87ba-f4da84e53cad","product":{"name":"opentelemetry-collector-k8s-0:0.161.0-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"307a8ed4-58fd-3d61-8b40-46500832a55b","product":{"name":"opentelemetry-collector-k8s-0:0.161.0-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b0afdd4a-4142-3254-a894-c0daecd07837","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"715f334c-7944-31c6-9a04-1ffe1b5de009","advisory":{"id":"SUSE-SU-2026:23984-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 5, 2026, 4:59:28 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23984-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0f610c99-27e9-301a-8ae3-45996e7e3982","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"1e8f5341-6eed-34b1-b37e-8e730acb7a0e","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"25f2b3e1-ded4-360b-bdb6-0088fb6623e3","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"3b963ec4-ce3b-3e27-9e50-f09786e52218","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"3ed756b4-43fd-3879-a1e3-cc642e8e3aae","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"63a96ec4-80c2-3362-be35-2f017ecf47e5","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6fa63fc0-dd99-36a8-958c-60db8f7d2f4a","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b17051e0-06b4-3f03-8dba-7eb822405a94","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f9f3b058-e598-3e9c-a341-247237c5b740","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"78be4100-b8bd-3bcd-b281-fb86840e037d","advisory":{"id":"msrc_CVE-2026-81872","description":"OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full","datePublished":"Sep 19, 2026, 1:03:04 AM","dateUpdated":"Oct 17, 2026, 1:44:21 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-81872.json\n","aliases":"CVE-2026-81872\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"133dcf89-8a6d-3948-951a-bf4e1f92655c","product":{"name":"azl3 azurelinux-image-tools 0:1.6.0-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"46fdd9d4-cfc7-3967-91c2-4b4624c74da6","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"ba61c3e4-c387-378a-9a40-78a8aa447e22","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"c528811e-3e41-3985-9475-f32057cb4ac6","product":{"name":"azurelinux-image-tools","vendor":{"name":"Microsoft"}}}]}},{"id":"7e3af4e7-a48a-3ec0-8b80-cc31038e142e","advisory":{"id":"openSUSE-SU-2026:22010-1","description":"Security update for distribution","summary":"Security update for distribution","datePublished":"Oct 1, 2026, 12:14:32 PM","dateUpdated":"Oct 3, 2026, 4:17:01 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22010-1.json\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"190c0adc-63ca-3e85-8a3f-f0cb15017f6e","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3419276d-eff2-3ee5-be68-4b2f917edf3d","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b4c75aa6-9235-3ceb-908f-3a79d053732a","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e78057ce-8221-31eb-9e7d-271c4cd14355","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f6348d63-2c62-3655-8b8e-0ee317d9da5a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"d7990021-40f5-31d7-b741-34c2f2e4f73d","advisory":{"id":"openSUSE-SU-2026:21983-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:58:26 PM","dateUpdated":"Oct 1, 2026, 4:39:39 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21983-1.json\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"4f501860-c244-31a9-9576-97a3eb59008a","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"64d76c88-f48d-32cb-a424-02f242e00c30","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a8bafc2b-a822-3c97-8fb0-2198106488ec","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b3579689-c960-36bb-8d23-7e16262d6488","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"b3d938fa-019d-3492-a406-51ccb3a26f89","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"b6a2d8cc-5231-3e20-9fab-5c7a754ba02d","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb8684e5-9a6a-3202-94dc-3c3f98c1153d","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f6c11c52-f6e0-3abf-812d-f44b8a995d24","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"eb2704ed-d63f-380f-bcd7-93b0d7a8345f","advisory":{"id":"SUSE-SU-2026:24282-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 19, 2026, 9:48:48 AM","dateUpdated":"Oct 26, 2026, 7:19:20 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24282-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-63209\nCVE-2026-78662\nCVE-2026-81870\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1e83493a-b796-3b88-b9d9-059829625ec7","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ecac57e-5314-33ad-a251-656e025c6f26","product":{"name":"helm-bash-completion-0:4.3.0-slfo.1.1_1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"5efff528-5220-3b4e-8125-fdba961fa6ea","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"94cbe7d6-174c-30c8-8c12-4ba6073c140d","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a7ef17e3-52b9-3d9b-b80f-1fcdfd4c2fc0","product":{"name":"SUSE Linux Micro 6.1","vendor":{"name":"SUSE"}}}]}},{"id":"fa74b978-d2ad-3b1a-8b62-80dd661bd83e","advisory":{"id":"RHSA-2026:68729","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:37:14 PM","dateUpdated":"Nov 7, 2026, 5:50:35 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68729\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68729.json\n","aliases":"CVE-2026-56851\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2a5ddbe2-196a-3b16-a56f-2d1cfecaa11c","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"6bb4ae25-3806-35be-bb9b-8a7ac77eebfb","product":{"name":"helm4-0:4.3.0-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6e6ba0ac-940d-3807-a851-c5f3b0b4f284","product":{"name":"helm4-0:4.3.0-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ec1a3ddc-573e-305a-9c88-ed286e6a4547","product":{"name":"helm4-0:4.3.0-0.2.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"fa8c8861-35d7-332c-9e03-55f816b850b7","advisory":{"id":"openSUSE-SU-2026:11872-1","description":"distribution-registry-3.1.1-8.1 on GA media","summary":"distribution-registry-3.1.1-8.1 on GA media","datePublished":"Sep 24, 2026, 12:00:00 AM","dateUpdated":"Sep 25, 2026, 8:57:14 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11872-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3425a256-12c9-3287-83e1-2798349ab6e3","product":{"name":"distribution-registry-0:3.1.1-8.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"55316c4c-f527-3dc9-83af-5fbd8b4b968b","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a96b871c-ec2d-3c36-aaf7-cc49ecf571c5","product":{"name":"distribution-registry-0:3.1.1-8.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c919793a-0738-3b97-926b-5c0e88936f08","product":{"name":"distribution-registry-0:3.1.1-8.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f68e5ab6-bbef-386b-bf39-ad6e87e4ff3b","product":{"name":"distribution-registry-0:3.1.1-8.1.s390x","vendor":{"name":"SUSE"}}}]}}]}