Denial of Service via malformed JSON input
Summary
Denial of Service via malformed JSON input. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1285. Affected package(s): multicluster-engine/assisted-service, syft-main, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779212259, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, trivy-main, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`).
- multicluster-engine/assisted-service-9-rhel9:1779135478
- syft-main-1.42.4-0.1.hum1
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779212259
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118
- trivy-main-0.72.0-0.1.hum1
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753
- rhosdt/tempo-query-rhel9:1776435613
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439
- multicluster-engine/assisted-service-8-rhel8:1778288655
- multicluster-engine/assisted-service-9-rhel9:1778288646
- rhacm2/acm-grafana-rhel9:1777142269
- rhosdt/tempo-rhel9:1776435680
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
- RHSA-2026:21769
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Mitigation checklist
- Update the affected package(s) to the fixed version shipped in RHSA-2026:21769 (`sudo dnf update` / `yum update`).
Official advisory · high-confidence parse· fetched 5 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.