{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Important"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.22.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\nThis advisory contains the extra vran topology aware lifecycle manager images for Red Hat OpenShift Container Platform 4.22.\nAll OpenShift Container Platform users are advised to upgrade to these updated packages and images.",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:95054",
      "url" : "https://access.redhat.com/errata/RHSA-2026:95054"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/cve/CVE-2026-84445",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-84445"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/",
      "url" : "https://access.redhat.com/security/updates/classification/"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95054.json"
    } ],
    "title" : "Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update",
    "tracking" : {
      "current_release_date" : "2026-11-11T06:22:25+00:00",
      "generator" : {
        "date" : "2026-11-11T06:22:25+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.4.5"
        }
      },
      "id" : "RHSA-2026:95054",
      "initial_release_date" : "2026-11-04T08:12:55+00:00",
      "revision_history" : [ {
        "date" : "2026-11-04T08:12:55+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-11-04T08:13:11+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-11-11T06:22:25+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat OpenShift Container Platform 4.22",
          "product" : {
            "name" : "Red Hat OpenShift Container Platform 4.22",
            "product_id" : "Red Hat OpenShift Container Platform 4.22",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:openshift:4.22::el9"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat OpenShift Container Platform"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64",
          "product" : {
            "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64",
            "product_id" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/topology-aware-lifecycle-manager-rhel9-operator@sha256%3A386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9?arch=amd64&repository_url=registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator&tag=1793680205"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64",
          "product" : {
            "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64",
            "product_id" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/topology-aware-lifecycle-manager-aztp-rhel9@sha256%3A47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580?arch=amd64&repository_url=registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9&tag=1793680181"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64",
          "product" : {
            "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64",
            "product_id" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/topology-aware-lifecycle-manager-operator-bundle@sha256%3A09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553?arch=amd64&repository_url=registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle&tag=1793685454"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64",
          "product" : {
            "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64",
            "product_id" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/topology-aware-lifecycle-manager-precache-rhel9@sha256%3A3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533?arch=amd64&repository_url=registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9&tag=1793679648"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64",
          "product" : {
            "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64",
            "product_id" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64",
            "product_identification_helper" : {
              "purl" : "pkg:oci/topology-aware-lifecycle-manager-recovery-rhel9@sha256%3A58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf?arch=amd64&repository_url=registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9&tag=1793679713"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "amd64"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
        "product_id" : "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64"
      },
      "product_reference" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64",
      "relates_to_product_reference" : "Red Hat OpenShift Container Platform 4.22"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
        "product_id" : "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64"
      },
      "product_reference" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64",
      "relates_to_product_reference" : "Red Hat OpenShift Container Platform 4.22"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
        "product_id" : "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64"
      },
      "product_reference" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64",
      "relates_to_product_reference" : "Red Hat OpenShift Container Platform 4.22"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
        "product_id" : "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64"
      },
      "product_reference" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64",
      "relates_to_product_reference" : "Red Hat OpenShift Container Platform 4.22"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64 as a component of Red Hat OpenShift Container Platform 4.22",
        "product_id" : "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64"
      },
      "product_reference" : "registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64",
      "relates_to_product_reference" : "Red Hat OpenShift Container Platform 4.22"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-84445",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-09-14T16:22:17.356407+00:00",
    "flags" : [ {
      "label" : "vulnerable_code_not_present",
      "product_ids" : [ "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64" ]
    } ],
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2533175"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64" ],
      "known_not_affected" : [ "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-84445"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2533175",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-84445",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-84445"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
      "url" : "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
      "url" : "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
      "url" : "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/issues/9354",
      "url" : "https://github.com/grpc/grpc-go/issues/9354"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/pull/9365",
      "url" : "https://github.com/grpc/grpc-go/pull/9365"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/pull/9366",
      "url" : "https://github.com/grpc/grpc-go/pull/9366"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/pull/9367",
      "url" : "https://github.com/grpc/grpc-go/pull/9367"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
      "url" : "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
      "url" : "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
    }, {
      "category" : "external",
      "summary" : "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
      "url" : "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
    } ],
    "release_date" : "2026-09-14T16:11:41.401000+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T08:12:55+00:00",
      "details" : "For OpenShift Container Platform 4.22, see the following documentation for important instructions about upgrading your cluster and applying this asynchronous errata update:\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/index\nInformation about accessing this content is available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli",
      "product_ids" : [ "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95054"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-aztp-rhel9@sha256:47d49f1abc4e98d91a27ed1c9bc0360e50c8913d282ae2538eb27229a0e73580_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-operator-bundle@sha256:09c564c35320e42b587820fb589306d30b15653516d96d5e618c0749dc049553_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-precache-rhel9@sha256:3ff1c24c6d991a737fa4ef0a6a47338b53143bbc52560198dc8876ec2b271533_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-recovery-rhel9@sha256:58475ee15e40458d33d75531f5baf07943538569a4a3ec3f4d234b8d5272c2cf_amd64", "Red Hat OpenShift Container Platform 4.22:registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel9-operator@sha256:386ab59ba367051e762f1cc08dec1502c5484394ef8dc6a43413fdc3181949c9_amd64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
  } ]
}