{"id":"EUVD-2026-81262","enisaUuid":"79d1ca52-ba8a-359a-a54e-8ede5d37b3d0","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but newGRPCDialOptions does not apply cfg.tlsCfg when creating gRPC transport credentials. The environment-only TLS path instead uses credentials.NewTLS with system roots and no configured client certificate, bypassing intended private CA pinning and mutual TLS unless the application also supplies WithTLSCredentials. A network attacker able to intercept or spoof the collector connection with a system-trusted certificate can read or alter log telemetry. This issue is fixed in version 0.21.0.","datePublished":"Sep 16, 2026, 8:43:40 PM","dateUpdated":"Sep 17, 2026, 7:24:00 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x\nhttps://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/otlplog/otlploggrpc/v0.21.0\n","aliases":"CVE-2026-81871\nGHSA-w34q-cm8f-9c5x\n","assigner":"GitHub_M","epss":0.2,"enisaIdProduct":[{"id":"1f7e2569-c42f-3a87-9d55-82b38b4eb012","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.21.0"}],"enisaIdVendor":[{"id":"dfcb7a9f-78fa-3a7d-bacf-e68ce66552da","vendor":{"name":"open-telemetry"}}],"enisaIdVulnerability":[{"id":"6d943ea2-e8cd-32fd-94f9-30e3ab3e64ad","vulnerability":{"id":"GHSA-w34q-cm8f-9c5x","description":"OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning","datePublished":"Sep 17, 2026, 8:31:09 PM","dateUpdated":"Sep 17, 2026, 8:31:09 PM","baseScore":0.0,"references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81871\nhttps://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c\nhttps://github.com/open-telemetry/opentelemetry-go\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/otlplog/otlploggrpc/v0.21.0\n","enisa_id":"EUVD-2026-81262\n","aliases":"CVE-2026-81871\nGHSA-w34q-cm8f-9c5x\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c6b06b1d-3c06-3d71-985d-a0f3674ebb18","vulnerability":{"id":"CVE-2026-81871","description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but newGRPCDialOptions does not apply cfg.tlsCfg when creating gRPC transport credentials. The environment-only TLS path instead uses credentials.NewTLS with system roots and no configured client certificate, bypassing intended private CA pinning and mutual TLS unless the application also supplies WithTLSCredentials. A network attacker able to intercept or spoof the collector connection with a system-trusted certificate can read or alter log telemetry. This issue is fixed in version 0.21.0.","datePublished":"Sep 16, 2026, 8:43:40 PM","dateUpdated":"Sep 17, 2026, 7:24:00 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x\nhttps://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c\nhttps://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/otlplog/otlploggrpc/v0.21.0\n","enisa_id":"EUVD-2026-81262\n","assigner":"GitHub_M","epss":0.2,"dataProcessed":"Nov 7, 2026, 7:24:37 AM","vulnerabilityProduct":[{"id":"9374619f-d006-3d1d-a624-4dfba4cad8e1","product":{"name":"opentelemetry-go","vendor":{"name":"open-telemetry"}},"product_version":"\u003c 0.21.0"}],"vulnerabilityVendor":[{"id":"d9dc0219-5fc8-33cd-97fd-a3128d6b3f6e","vendor":{"name":"open-telemetry"}}]}}],"enisaIdAdvisory":[{"id":"1cf41350-0510-342e-ac71-501dd489effb","advisory":{"id":"RHSA-2026:68729","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:37:14 PM","dateUpdated":"Oct 30, 2026, 6:34:49 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68729\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68729.json\n","aliases":"CVE-2026-56851\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2a5ddbe2-196a-3b16-a56f-2d1cfecaa11c","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"6bb4ae25-3806-35be-bb9b-8a7ac77eebfb","product":{"name":"helm4-0:4.3.0-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6e6ba0ac-940d-3807-a851-c5f3b0b4f284","product":{"name":"helm4-0:4.3.0-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ec1a3ddc-573e-305a-9c88-ed286e6a4547","product":{"name":"helm4-0:4.3.0-0.2.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"23bd017a-19fb-3f1b-b830-35bedcba9663","advisory":{"id":"RHSA-2026:68932","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:40:34 PM","dateUpdated":"Oct 15, 2026, 11:28:56 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68932\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68932.json\n","aliases":"CVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0743fbcf-9506-39c1-8fee-c9b969bf6525","product":{"name":"loki3.6-canary-0:3.6.17-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1c6cff5b-71dc-3698-bb8a-9390822715a5","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"1fd2a24b-9682-35e7-b85b-081def71751a","product":{"name":"loki3.6-0:3.6.17-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"365e7f58-cef9-3c28-a2b2-df785e447d5c","product":{"name":"loki3.6-0:3.6.17-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4be75934-67f3-3684-b103-7a57a99ba9ff","product":{"name":"loki3.6-logcli-0:3.6.17-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"d3cad6d2-0a41-3dbb-b48c-f3beb6cc6543","product":{"name":"loki3.6-canary-0:3.6.17-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d488eb05-68e2-3016-8225-12346bad20eb","product":{"name":"loki3.6-logcli-0:3.6.17-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"deba1d5d-09b0-3623-9377-1b038aa7827e","product":{"name":"loki3.6-0:3.6.17-0.2.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"249680b6-5cf7-3c96-bd70-7067d423f936","advisory":{"id":"RHSA-2026:68926","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:38:27 PM","dateUpdated":"Oct 30, 2026, 6:48:12 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68926\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68926.json\n","aliases":"CVE-2026-14199\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"8d977062-b81d-35c8-bfac-21a7965846dc","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c7b92c05-0073-3464-bb70-6624f6ea2cce","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"e2e34a77-8a5a-33c7-a6f7-4722af41f726","product":{"name":"grafana13.1-0:13.1.6-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f7f82093-18f0-305e-8d0a-48b86128b23a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"2d62d15e-cac1-3702-add6-18fc6e4d7807","advisory":{"id":"openSUSE-SU-2026:11875-1","description":"helm-4.3.0-3.1 on GA media","summary":"helm-4.3.0-3.1 on GA media","datePublished":"Sep 24, 2026, 12:00:00 AM","dateUpdated":"Sep 25, 2026, 8:57:17 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11875-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"02c6a161-1184-340e-8550-b8dc6ca97959","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"146a24bb-0659-34ef-a900-b34bcd7464d6","product":{"name":"helm-bash-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2cf017b9-5c91-367a-bb17-f02f3f30c33b","product":{"name":"helm-bash-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3bf0f600-596d-329a-8b5a-2b1de2cc6240","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"41881fdd-cbc0-3bd2-b5e8-2d8866df819f","product":{"name":"helm-fish-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4c593f35-cc4d-3756-8c6a-58490e2f4e28","product":{"name":"helm-fish-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4d59d30a-9311-3bfd-9977-8142b0954ffd","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"524c131d-5c4c-329d-ad39-be3d6902bb73","product":{"name":"helm-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5cf24ce9-f519-3abc-a2c1-ea1aa4973878","product":{"name":"helm-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5f75347c-c0b9-3b79-bddc-bd95b5c6ff4d","product":{"name":"helm-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"618689e3-b36e-311a-a9a4-79fcd7bf3b59","product":{"name":"helm-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"66d862d7-104e-3a83-aeb3-6659bec2c60b","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.s390x","vendor":{"name":"SUSE"}}},{"id":"69a6dd78-04f3-3f01-878b-47258bb81f97","product":{"name":"helm-bash-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"70635a56-403b-32b9-8d90-d417ce990b38","product":{"name":"helm-fish-completion-0:4.3.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b70fbf1a-89e7-3c9f-b1b0-fda661f90abf","product":{"name":"helm-bash-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c211629c-c8fd-31f2-b787-2eb16bf4123f","product":{"name":"helm-zsh-completion-0:4.3.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c51af447-5524-3495-a6b8-9d02c6e69024","product":{"name":"helm-fish-completion-0:4.3.0-3.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"2f926a19-dec0-3280-add5-0dae8500dc81","advisory":{"id":"openSUSE-SU-2026:22010-1","description":"Security update for distribution","summary":"Security update for distribution","datePublished":"Oct 1, 2026, 12:14:32 PM","dateUpdated":"Oct 3, 2026, 4:17:01 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22010-1.json\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"190c0adc-63ca-3e85-8a3f-f0cb15017f6e","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3419276d-eff2-3ee5-be68-4b2f917edf3d","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b4c75aa6-9235-3ceb-908f-3a79d053732a","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e78057ce-8221-31eb-9e7d-271c4cd14355","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f6348d63-2c62-3655-8b8e-0ee317d9da5a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"2fb746a8-57e5-3b80-aa83-f64f122ebe5f","advisory":{"id":"msrc_CVE-2026-81871","description":"OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning","datePublished":"Sep 19, 2026, 1:02:50 AM","dateUpdated":"Oct 17, 2026, 1:44:17 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-81871.json\n","aliases":"CVE-2026-81871\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"160a6273-0edf-3b75-b9cf-bde163d70355","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"71d64688-4e23-3d9b-a0bc-6b4045091451","product":{"name":"azurelinux-image-tools","vendor":{"name":"Microsoft"}}},{"id":"c6214ba1-0303-3cf6-b62b-b8b6a04c4b8c","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"f21e6650-3ca0-3c7d-bfc9-b69ea3379c29","product":{"name":"azl3 azurelinux-image-tools 0:1.6.0-3.azl3","vendor":{"name":"Microsoft"}}}]}},{"id":"3dda9c8c-547d-342e-a7f9-84b916002968","advisory":{"id":"SUSE-SU-2026:23984-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 5, 2026, 4:59:28 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23984-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0f610c99-27e9-301a-8ae3-45996e7e3982","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"1e8f5341-6eed-34b1-b37e-8e730acb7a0e","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"25f2b3e1-ded4-360b-bdb6-0088fb6623e3","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"3b963ec4-ce3b-3e27-9e50-f09786e52218","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"3ed756b4-43fd-3879-a1e3-cc642e8e3aae","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"63a96ec4-80c2-3362-be35-2f017ecf47e5","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6fa63fc0-dd99-36a8-958c-60db8f7d2f4a","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b17051e0-06b4-3f03-8dba-7eb822405a94","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f9f3b058-e598-3e9c-a341-247237c5b740","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"412b253d-9000-31f3-b19f-ee60a41c2749","advisory":{"id":"RHSA-2026:68912","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:28:02 PM","dateUpdated":"Oct 15, 2026, 11:28:56 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68912\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68912.json\n","aliases":"CVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"20b7b850-caa2-3218-8b71-2fd50122f72b","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"403e2cb8-04ba-3b5b-9606-367d98a66499","product":{"name":"tempo3.0-0:3.0.3-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"504315aa-8b64-3de5-8a48-484de63d863f","product":{"name":"tempo3.0-0:3.0.3-0.3.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"faeab6a2-8111-324a-9e2f-5d8c459ff94a","product":{"name":"tempo3.0-0:3.0.3-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"5687a4d8-9802-3e8d-ac7a-7f408520c3ed","advisory":{"id":"RHSA-2026:74865","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 2, 2026, 9:19:24 AM","dateUpdated":"Oct 15, 2026, 11:30:09 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74865\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74865.json\n","aliases":"CVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"cd219537-dc05-3c69-9e3f-e00b4124262b","product":{"name":"caddy-0:2.11.6-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"d569fbd8-b0e6-310e-b45c-9cd64c632451","product":{"name":"caddy-0:2.11.6-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fa0c6b4c-0dcf-3231-9e15-b896c936f308","product":{"name":"caddy-0:2.11.6-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"faf823c7-577c-33e8-ad23-d058dfb57e6c","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"5bdbc5aa-c04c-31c8-a692-90c9a3cfc064","advisory":{"id":"RHSA-2026:68903","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:24:39 PM","dateUpdated":"Oct 15, 2026, 11:28:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68903\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68903.json\n","aliases":"CVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2c1c492d-ecf5-3ddb-b496-f4ef093e4a86","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"3e0afab0-45ee-3c6f-9bf9-d0a82ff55cf2","product":{"name":"tempo2.10-0:2.10.8-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"8073a928-f11d-3bd5-b97f-28053272d973","product":{"name":"tempo2.10-0:2.10.8-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"bb0b8b7e-b7d1-3182-9d54-58c8313978dc","product":{"name":"tempo2.10-0:2.10.8-0.3.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"64b56d26-8373-3b9c-9c47-13391475c46e","advisory":{"id":"RHSA-2026:68715","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:04:33 PM","dateUpdated":"Oct 30, 2026, 7:22:24 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68715\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68715.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"95ca56c2-90aa-31ef-876b-7d81d3c11800","product":{"name":"caddy-0:2.11.4-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a87f0e38-d049-3e44-a01f-4a9ac08a9f97","product":{"name":"caddy-0:2.11.4-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cb8075e7-7c23-3d2a-8ef7-34f123e642c4","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"df0974fa-a0d7-39d8-a604-af4b07237ef6","product":{"name":"caddy-0:2.11.4-0.4.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"69c60551-217c-36ac-9939-ebf26811b0b1","advisory":{"id":"RHSA-2026:68821","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 8:52:34 AM","dateUpdated":"Oct 30, 2026, 7:22:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68821\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68821.json\n","aliases":"CVE-2026-28374\nCVE-2026-28376\nCVE-2026-28379\nCVE-2026-28380\nCVE-2026-28383\nCVE-2026-33376\nCVE-2026-33377\nCVE-2026-33378\nCVE-2026-33380\nCVE-2026-33381\nCVE-2026-61709\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"4faa3e93-b0e4-3142-a4dd-0efdce2801d5","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"90110a57-b772-398d-a6a1-1e91df1b5775","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"92ea09f5-c22f-3d5c-9eec-4fe63d6a3cb6","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"9daa4070-1188-3c18-8fdf-8f0b504e248f","product":{"name":"grafana12.4-0:12.4.10-0.6.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"6d08e58e-f070-3f61-b459-231615843fce","advisory":{"id":"SUSE-SU-2026:23973-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:49:13 PM","dateUpdated":"Oct 15, 2026, 5:13:23 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23973-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"21607737-4e66-3f06-a45a-29f2f23b02a8","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"400dba31-2ec6-36d4-991f-7c0b5bd6e80b","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6ce9aae9-e277-3370-b5a4-56aba23ffb55","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7a97ab71-4b96-39bc-aa3b-ee89a5c15ede","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a71f8e6d-207d-3f79-97a2-f016451fea1e","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"b6ae4ad5-fb06-300a-8fd8-11bc2693f1e5","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"6eb40ec1-cf56-31e8-9979-80dab782be06","advisory":{"id":"RHSA-2026:68777","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 8:53:32 PM","dateUpdated":"Oct 20, 2026, 4:08:51 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68777\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68777.json\n","aliases":"CVE-2026-61709\nCVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"04814cc3-5690-3417-97b8-9a0620e08b8f","product":{"name":"grafana12.4-0:12.4.10-0.5.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"91aeb614-8dab-3f7f-a106-13eeb70312cb","product":{"name":"grafana12.4-0:12.4.10-0.5.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a38886ae-8ab4-3a9f-b2fb-89b079524f8c","product":{"name":"grafana12.4-0:12.4.10-0.5.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f407d445-9b49-3292-9576-6ae4dc504891","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"73c56c3a-456f-3cc4-a9d5-f61282137955","advisory":{"id":"SUSE-SU-2026:23990-1","description":"Security update for distribution","summary":"Security update for distribution","datePublished":"Oct 1, 2026, 12:12:02 PM","dateUpdated":"Oct 5, 2026, 4:59:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23990-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"3590833b-cae4-3d4b-8050-197d69b7eeaa","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3b2dcbff-128b-368b-a4dc-096a130b7a61","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b435348-515a-3e06-a3fd-1be0a6598cdd","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b2833161-1236-3f25-a8dc-a8d82eb29c4b","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"ccbbe62e-801c-3691-9dad-0e2077cd1b7a","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"fcb6e76a-522f-33e4-9933-3bcc7419217b","product":{"name":"distribution-registry-0:3.1.1-160000.4.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"84dd2906-b50b-37ee-a6fd-fdaabd1c5857","advisory":{"id":"openSUSE-SU-2026:21983-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Sep 30, 2026, 5:58:26 PM","dateUpdated":"Oct 1, 2026, 4:39:39 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21983-1.json\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-78662\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"4f501860-c244-31a9-9576-97a3eb59008a","product":{"name":"helm-zsh-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"64d76c88-f48d-32cb-a424-02f242e00c30","product":{"name":"helm-0:4.3.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a8bafc2b-a822-3c97-8fb0-2198106488ec","product":{"name":"helm-0:4.3.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b3579689-c960-36bb-8d23-7e16262d6488","product":{"name":"helm-fish-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"b3d938fa-019d-3492-a406-51ccb3a26f89","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"b6a2d8cc-5231-3e20-9fab-5c7a754ba02d","product":{"name":"helm-0:4.3.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"eb8684e5-9a6a-3202-94dc-3c3f98c1153d","product":{"name":"helm-bash-completion-0:4.3.0-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f6c11c52-f6e0-3abf-812d-f44b8a995d24","product":{"name":"helm-0:4.3.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"92b53115-9677-329a-87cd-9066ff8e2c99","advisory":{"id":"openSUSE-SU-2026:11872-1","description":"distribution-registry-3.1.1-8.1 on GA media","summary":"distribution-registry-3.1.1-8.1 on GA media","datePublished":"Sep 24, 2026, 12:00:00 AM","dateUpdated":"Sep 25, 2026, 8:57:14 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11872-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3425a256-12c9-3287-83e1-2798349ab6e3","product":{"name":"distribution-registry-0:3.1.1-8.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"55316c4c-f527-3dc9-83af-5fbd8b4b968b","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a96b871c-ec2d-3c36-aaf7-cc49ecf571c5","product":{"name":"distribution-registry-0:3.1.1-8.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c919793a-0738-3b97-926b-5c0e88936f08","product":{"name":"distribution-registry-0:3.1.1-8.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f68e5ab6-bbef-386b-bf39-ad6e87e4ff3b","product":{"name":"distribution-registry-0:3.1.1-8.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"94c4221a-b969-35d7-9e37-5dc0645688f0","advisory":{"id":"RHSA-2026:68716","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:05:49 PM","dateUpdated":"Oct 30, 2026, 7:22:24 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68716\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68716.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"21cd840c-68c1-3377-bd14-b166e1f483ea","product":{"name":"distribution-0:3.1.1-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"808df4a2-53d7-38fb-8568-8265feba8be1","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"92bf9dc6-7bcf-3634-8ed1-3e09c30e835c","product":{"name":"distribution-0:3.1.1-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"df985732-64d4-3e83-966c-065fb954ea88","product":{"name":"distribution-0:3.1.1-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"981fb847-3b8a-37c3-ba0f-e3958c616bcc","advisory":{"id":"openSUSE-SU-2026:12114-1","description":"alloy-1.20.1-1.1 on GA media","summary":"alloy-1.20.1-1.1 on GA media","datePublished":"Oct 13, 2026, 12:00:00 AM","dateUpdated":"Oct 14, 2026, 10:28:19 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12114-1.json\nhttps://www.suse.com/security/cve/CVE-2026-14362/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-84303/\nhttps://www.suse.com/security/cve/CVE-2026-84304/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\n","aliases":"CVE-2026-14362\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-84303\nCVE-2026-84304\nCVE-2026-84445\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"156dde35-2718-3da9-812c-a95936086c3c","product":{"name":"alloy-0:1.20.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3cd134cd-7fe7-3933-8bb2-3ae6d1600159","product":{"name":"alloy-0:1.20.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5cb4cbcb-4090-3e1a-8731-2070bb104238","product":{"name":"alloy-0:1.20.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e3f031f6-9d33-35d6-af1a-01baeeaed840","product":{"name":"alloy-0:1.20.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fe4d15f8-6d8b-3a0e-b6bc-53a8bc14e479","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}}]}},{"id":"9c7637c1-39c8-3869-9f27-f2e5068ed01b","advisory":{"id":"RHSA-2026:74948","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 2, 2026, 12:11:26 PM","dateUpdated":"Oct 30, 2026, 6:54:38 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74948\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74948.json\n","aliases":"CVE-2026-56851\nCVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"075fcab3-3a73-39b0-8bbb-8e56540bc4b3","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"5955cc09-300c-380e-bb06-73ca9de1cf57","product":{"name":"opentofu1.12-0:1.12.7-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"95630692-8495-370f-81cc-ff815e7fb130","product":{"name":"opentofu1.12-0:1.12.7-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"dd5317b6-ca13-3c1b-8268-5127c14c4561","product":{"name":"opentofu1.12-0:1.12.7-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"c5793f55-d449-3ee9-b541-00b3c933df74","advisory":{"id":"RHSA-2026:68778","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 9:04:02 PM","dateUpdated":"Oct 30, 2026, 7:22:25 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68778\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68778.json\n","aliases":"CVE-2026-28374\nCVE-2026-28376\nCVE-2026-28379\nCVE-2026-28380\nCVE-2026-28383\nCVE-2026-33376\nCVE-2026-33377\nCVE-2026-33378\nCVE-2026-33380\nCVE-2026-33381\nCVE-2026-42127\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-92599\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1f860e20-9ae1-3d57-a0ea-9df7841648f3","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"2cb1e5d4-9db4-3bad-802c-7e81c6314aac","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"96fdcc0e-3f75-3bc6-a994-02ed881ddeb7","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f46aef19-3f1a-3c5d-a07c-2fd261b718e7","product":{"name":"grafana13.2-0:13.2.1-0.5.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"d53a4549-c291-35d9-a2fb-9d0133dfe03c","advisory":{"id":"openSUSE-SU-2026:11892-1","description":"helm3-3.22.0-2.1 on GA media","summary":"helm3-3.22.0-2.1 on GA media","datePublished":"Sep 28, 2026, 12:00:00 AM","dateUpdated":"Sep 29, 2026, 8:22:54 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11892-1.json\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0a407bc6-37ef-36bf-a921-6feea806f0d8","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0d9bd7cf-a4b5-3b1b-9fa7-765781bff7b9","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"3297da89-a6c4-37df-b690-be61ed9e014d","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"34514447-32f5-3cb9-a730-fa6d6e858f8a","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"360d24cc-e40b-37b0-9cdd-64af201ad07f","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"440d63e8-3b39-3915-8673-5f819df28859","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"52c6f9fc-b774-3edb-bda5-2d7e073c3edf","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"61f4480c-6b6f-3f94-a8ef-986045df4c05","product":{"name":"helm3-fish-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"69fb1563-e772-3583-b55f-ea7ffd358232","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a82cba9-5bf7-325c-bd37-d11127878435","product":{"name":"helm3-zsh-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7b4c6979-a8a5-378c-a928-fb7b1ccc059c","product":{"name":"helm3-0:3.22.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"997b6960-463c-3179-bd2e-6e2bb8fa233e","product":{"name":"helm3-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a863db7f-9ac9-3f04-9f55-5d487bad0d9d","product":{"name":"helm3-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b0291c30-8058-3819-a599-4a868e778b99","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b9234405-61ea-346d-8f8e-a47011cc60a3","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e41b7531-baae-320a-8202-f512ea5e3880","product":{"name":"helm3-bash-completion-0:3.22.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f9dfa1cb-bd99-3b40-96cd-8e63bfd3a513","product":{"name":"helm3-0:3.22.0-2.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"d6fa9868-6479-3764-b21d-6b41c1e35198","advisory":{"id":"RHSA-2026:68905","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:25:38 PM","dateUpdated":"Oct 30, 2026, 7:22:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68905\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68905.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"38aa77bd-d222-3fff-8ae0-47a1a3ba028f","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"52931eae-bcd5-3f59-92b7-2d1152af5490","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"60489344-d33f-3f1f-b303-f8ef34d73d3f","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"67645c2c-7d52-38ca-ad62-069a819b808b","product":{"name":"opentofu1.12-0:1.12.6-0.3.hum1@src","vendor":{"name":"Red Hat"}}}]}},{"id":"daf63a06-5906-383c-8845-36588ddc778d","advisory":{"id":"RHSA-2026:68910","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:27:12 PM","dateUpdated":"Oct 30, 2026, 7:22:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68910\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68910.json\n","aliases":"CVE-2026-81871\nCVE-2026-81872\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"bdb61ae2-8f26-3f1a-a842-dfb771580ade","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"ca066f80-cec2-38bd-a47c-641b8db840b0","product":{"name":"jaeger-0:2.20.0-0.9.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"da323a3d-ccb3-39c9-ab4f-e059e9f5fabf","product":{"name":"jaeger-0:2.20.0-0.9.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ff1784c0-1290-3b2b-942d-b32a02a40bab","product":{"name":"jaeger-0:2.20.0-0.9.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"e1577103-71db-3a41-b71a-fd056ea26f66","advisory":{"id":"SUSE-SU-2026:24282-1","description":"Security update for helm","summary":"Security update for helm","datePublished":"Oct 19, 2026, 9:48:48 AM","dateUpdated":"Oct 26, 2026, 7:19:20 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24282-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624282-1/\nhttps://bugzilla.suse.com/1261935\nhttps://bugzilla.suse.com/1261938\nhttps://bugzilla.suse.com/1261939\nhttps://bugzilla.suse.com/1265428\nhttps://bugzilla.suse.com/1265758\nhttps://bugzilla.suse.com/1270127\nhttps://bugzilla.suse.com/1271660\nhttps://bugzilla.suse.com/1271997\nhttps://bugzilla.suse.com/1275024\nhttps://bugzilla.suse.com/1275025\nhttps://bugzilla.suse.com/1276327\nhttps://bugzilla.suse.com/1276510\nhttps://bugzilla.suse.com/1276514\nhttps://bugzilla.suse.com/1281112\nhttps://bugzilla.suse.com/1281426\nhttps://bugzilla.suse.com/1281468\nhttps://bugzilla.suse.com/1281469\nhttps://bugzilla.suse.com/1283642\nhttps://bugzilla.suse.com/1284104\nhttps://www.suse.com/security/cve/CVE-2026-33814/\nhttps://www.suse.com/security/cve/CVE-2026-35204/\nhttps://www.suse.com/security/cve/CVE-2026-35205/\nhttps://www.suse.com/security/cve/CVE-2026-35206/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-48978/\nhttps://www.suse.com/security/cve/CVE-2026-50151/\nhttps://www.suse.com/security/cve/CVE-2026-50163/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-56864/\nhttps://www.suse.com/security/cve/CVE-2026-56865/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81870/\nhttps://www.suse.com/security/cve/CVE-2026-81871/\nhttps://www.suse.com/security/cve/CVE-2026-81872/\nhttps://www.suse.com/security/cve/CVE-2026-85732/\n","aliases":"CVE-2026-33814\nCVE-2026-35204\nCVE-2026-35205\nCVE-2026-35206\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-48978\nCVE-2026-50151\nCVE-2026-50163\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-56864\nCVE-2026-56865\nCVE-2026-63209\nCVE-2026-78662\nCVE-2026-81870\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-85732\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1e83493a-b796-3b88-b9d9-059829625ec7","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ecac57e-5314-33ad-a251-656e025c6f26","product":{"name":"helm-bash-completion-0:4.3.0-slfo.1.1_1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"5efff528-5220-3b4e-8125-fdba961fa6ea","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"94cbe7d6-174c-30c8-8c12-4ba6073c140d","product":{"name":"helm-0:4.3.0-slfo.1.1_1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a7ef17e3-52b9-3d9b-b80f-1fcdfd4c2fc0","product":{"name":"SUSE Linux Micro 6.1","vendor":{"name":"SUSE"}}}]}},{"id":"e8a1b343-ca87-33c7-883e-8d0f1dfc7a5b","advisory":{"id":"RHSA-2026:68717","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 17, 2026, 7:07:28 PM","dateUpdated":"Oct 30, 2026, 6:34:49 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68717\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68717.json\n","aliases":"CVE-2026-56851\nCVE-2026-63209\nCVE-2026-81871\nCVE-2026-81872\nCVE-2026-93450\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"51b0617f-f96e-37b1-9242-4c5c90878eff","product":{"name":"helm3-0:3.22.0-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6634e34-03b9-333a-ac4c-b4ad35679dd6","product":{"name":"helm3-0:3.22.0-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"cad2741a-7834-3ed5-8c3d-a640f65f76e7","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e930bc6b-dc6f-3f51-92f0-5cbcf94fadf7","product":{"name":"helm3-0:3.22.0-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"fb845f51-3e83-3762-ab4a-242f7445efd8","advisory":{"id":"RHSA-2026:68941","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 18, 2026, 4:46:12 PM","dateUpdated":"Oct 15, 2026, 11:28:56 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:68941\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68941.json\n","aliases":"CVE-2026-81871\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"20aea79b-c956-3995-bd9e-4ea296a50f9e","product":{"name":"loki3.7-0:3.7.8-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"30343e26-e03d-36cd-a4f7-cd77b4300db3","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"71c6e93d-2bb9-361d-a597-04e51bc22c49","product":{"name":"loki3.7-logcli-0:3.7.8-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7267141e-665d-3b55-b0ee-cdd0a59ca119","product":{"name":"loki3.7-0:3.7.8-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"73bf9637-08ce-3d89-9395-f8d67cd786b9","product":{"name":"loki3.7-logcli-0:3.7.8-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a0157adf-3209-3494-a0c0-2ebb490ab5ed","product":{"name":"loki3.7-canary-0:3.7.8-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"abd6c6a2-f190-3b8b-a4ae-2bbbcf9fca05","product":{"name":"loki3.7-0:3.7.8-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"bb59218e-4fb9-3a1d-8fc4-805691dd0311","product":{"name":"loki3.7-canary-0:3.7.8-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}}]}