{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15599.json"
      }
    ],
    "title": "DOMPurify: DOMPurify: Cross-site scripting",
    "tracking": {
      "current_release_date": "2026-07-02T17:10:28+00:00",
      "generator": {
        "date": "2026-07-02T17:10:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "CVE-2025-15599",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2025-01-01T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-02T16:49:54+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-07-02T17:10:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4",
                "product": {
                  "name": "Cryostat 4",
                  "product_id": "cryostat_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Migration Toolkit for Virtualization",
                "product": {
                  "name": "Migration Toolkit for Virtualization",
                  "product_id": "migration_toolkit_for_virtualization",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Migration Toolkit for Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Engine for Kubernetes",
                "product": {
                  "name": "Multicluster Engine for Kubernetes",
                  "product_id": "multicluster_engine_for_kubernetes",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_engine"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Engine for Kubernetes"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Network Observability Operator",
                "product": {
                  "name": "Network Observability Operator",
                  "product_id": "network_observability_operator",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_observ_optr:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Network Observability Operator"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Node HealthCheck Operator",
                "product": {
                  "name": "Node HealthCheck Operator",
                  "product_id": "node_healthcheck_operator",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:workload_availability_nhc:0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Node HealthCheck Operator"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Pipelines",
                "product": {
                  "name": "OpenShift Pipelines",
                  "product_id": "openshift_pipelines",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_pipelines:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Pipelines"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat 3scale API Management Platform 2",
                "product": {
                  "name": "Red Hat 3scale API Management Platform 2",
                  "product_id": "red_hat_3scale_api_management_platform_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:red_hat_3scale_amp:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat 3scale API Management Platform 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Management for Kubernetes 2",
                "product": {
                  "name": "Red Hat Advanced Cluster Management for Kubernetes 2",
                  "product_id": "red_hat_advanced_cluster_management_for_kubernetes_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:acm:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Management for Kubernetes 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Security 4",
                "product": {
                  "name": "Red Hat Advanced Cluster Security 4",
                  "product_id": "red_hat_advanced_cluster_security_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ansible Automation Platform 2",
                "product": {
                  "name": "Red Hat Ansible Automation Platform 2",
                  "product_id": "red_hat_ansible_automation_platform_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_automation_platform:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ansible Automation Platform 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apache Camel - HawtIO 4",
                "product": {
                  "name": "Red Hat build of Apache Camel - HawtIO 4",
                  "product_id": "red_hat_build_of_apache_camel_-_hawtio_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_hawtio:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Apache Camel - HawtIO 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apicurio Registry 2",
                "product": {
                  "name": "Red Hat build of Apicurio Registry 2",
                  "product_id": "red_hat_build_of_apicurio_registry_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:service_registry:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Apicurio Registry 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "red_hat_enterprise_linux_10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 10"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "red_hat_enterprise_linux_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 9",
                "product": {
                  "name": "Red Hat Enterprise Linux 9",
                  "product_id": "red_hat_enterprise_linux_9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 9"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift AI (RHOAI)",
                "product": {
                  "name": "Red Hat OpenShift AI (RHOAI)",
                  "product_id": "red_hat_openshift_ai_(rhoai)",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_ai"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift AI (RHOAI)"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4",
                  "product_id": "red_hat_openshift_container_platform_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Container Platform 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Openshift Data Foundation 4",
                "product": {
                  "name": "Red Hat Openshift Data Foundation 4",
                  "product_id": "red_hat_openshift_data_foundation_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_data_foundation:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Openshift Data Foundation 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps",
                "product": {
                  "name": "Red Hat OpenShift GitOps",
                  "product_id": "red_hat_openshift_gitops",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Virtualization 4",
                "product": {
                  "name": "Red Hat OpenShift Virtualization 4",
                  "product_id": "red_hat_openshift_virtualization_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Virtualization 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Process Automation 7",
                "product": {
                  "name": "Red Hat Process Automation 7",
                  "product_id": "red_hat_process_automation_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Process Automation 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Self-service automation portal 2",
                "product": {
                  "name": "Self-service automation portal 2",
                  "product_id": "self-service_automation_portal_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ansible_portal:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Self-service automation portal 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "streams for Apache Kafka 2",
                "product": {
                  "name": "streams for Apache Kafka 2",
                  "product_id": "streams_for_apache_kafka_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "streams for Apache Kafka 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "streams for Apache Kafka 3",
                "product": {
                  "name": "streams for Apache Kafka 3",
                  "product_id": "streams_for_apache_kafka_3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "streams for Apache Kafka 3"
          },
          {
            "category": "product_version",
            "name": "io.cryostat-cryostat",
            "product": {
              "name": "io.cryostat-cryostat",
              "product_id": "io.cryostat-cryostat",
              "product_identification_helper": {
                "purl": "pkg:generic/redhat/io.cryostat-cryostat"
              }
            }
          },
          {
            "category": "product_version",
            "name": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "product": {
              "name": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
              "product_id": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/mtv-console-plugin-rhel9?repository_url=registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "mtv-candidate/mtv-console-plugin-rhel9",
            "product": {
              "name": "mtv-candidate/mtv-console-plugin-rhel9",
              "product_id": "mtv-candidate/mtv-console-plugin-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/mtv-console-plugin-rhel9?repository_url=registry.redhat.io/mtv-candidate/mtv-console-plugin-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "multicluster-engine/console-mce-rhel9",
            "product": {
              "name": "multicluster-engine/console-mce-rhel9",
              "product_id": "multicluster-engine/console-mce-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/console-mce-rhel9?repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "network-observability/network-observability-console-plugin-compat-rhel9",
            "product": {
              "name": "network-observability/network-observability-console-plugin-compat-rhel9",
              "product_id": "network-observability/network-observability-console-plugin-compat-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/network-observability-console-plugin-compat-rhel9?repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "workload-availability/node-healthcheck-must-gather-rhel9",
            "product": {
              "name": "workload-availability/node-healthcheck-must-gather-rhel9",
              "product_id": "workload-availability/node-healthcheck-must-gather-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/node-healthcheck-must-gather-rhel9?repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "workload-availability/node-healthcheck-operator-bundle",
            "product": {
              "name": "workload-availability/node-healthcheck-operator-bundle",
              "product_id": "workload-availability/node-healthcheck-operator-bundle",
              "product_identification_helper": {
                "purl": "pkg:oci/node-healthcheck-operator-bundle?repository_url=registry.redhat.io/workload-availability/node-healthcheck-operator-bundle"
              }
            }
          },
          {
            "category": "product_version",
            "name": "workload-availability/node-healthcheck-rhel9-operator",
            "product": {
              "name": "workload-availability/node-healthcheck-rhel9-operator",
              "product_id": "workload-availability/node-healthcheck-rhel9-operator",
              "product_identification_helper": {
                "purl": "pkg:oci/node-healthcheck-rhel9-operator?repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator"
              }
            }
          },
          {
            "category": "product_version",
            "name": "workload-availability/node-remediation-console-rhel9",
            "product": {
              "name": "workload-availability/node-remediation-console-rhel9",
              "product_id": "workload-availability/node-remediation-console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/node-remediation-console-rhel9?repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-pipelines/pipelines-hub-api-rhel8",
            "product": {
              "name": "openshift-pipelines/pipelines-hub-api-rhel8",
              "product_id": "openshift-pipelines/pipelines-hub-api-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/pipelines-hub-api-rhel8?repository_url=registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
            "product": {
              "name": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
              "product_id": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/pipelines-hub-db-migration-rhel8?repository_url=registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": {
              "name": "openshift-pipelines/pipelines-hub-ui-rhel8",
              "product_id": "openshift-pipelines/pipelines-hub-ui-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/pipelines-hub-ui-rhel8?repository_url=registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp20/system",
            "product": {
              "name": "3scale-amp20/system",
              "product_id": "3scale-amp20/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp20/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp21/system",
            "product": {
              "name": "3scale-amp21/system",
              "product_id": "3scale-amp21/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp21/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp22/system",
            "product": {
              "name": "3scale-amp22/system",
              "product_id": "3scale-amp22/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp22/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp24/system",
            "product": {
              "name": "3scale-amp24/system",
              "product_id": "3scale-amp24/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp24/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp25/system",
            "product": {
              "name": "3scale-amp25/system",
              "product_id": "3scale-amp25/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp25/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp26/system",
            "product": {
              "name": "3scale-amp26/system",
              "product_id": "3scale-amp26/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp26/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel7",
            "product": {
              "name": "3scale-amp2/system-rhel7",
              "product_id": "3scale-amp2/system-rhel7",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel7?repository_url=registry.redhat.io/3scale-amp2/system-rhel7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel8",
            "product": {
              "name": "3scale-amp2/system-rhel8",
              "product_id": "3scale-amp2/system-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel8?repository_url=registry.redhat.io/3scale-amp2/system-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel9",
            "product": {
              "name": "3scale-amp2/system-rhel9",
              "product_id": "3scale-amp2/system-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel9?repository_url=registry.redhat.io/3scale-amp2/system-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhacm2/console-rhel9",
            "product": {
              "name": "rhacm2/console-rhel9",
              "product_id": "rhacm2/console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/console-rhel9?repository_url=registry.redhat.io/rhacm2/console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "advanced-cluster-security/rhacs-main-rhel8",
            "product": {
              "name": "advanced-cluster-security/rhacs-main-rhel8",
              "product_id": "advanced-cluster-security/rhacs-main-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/rhacs-main-rhel8?repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ansible-automation-platform-26/gateway-rhel9",
            "product": {
              "name": "ansible-automation-platform-26/gateway-rhel9",
              "product_id": "ansible-automation-platform-26/gateway-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/gateway-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-26/gateway-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "automation-controller.src",
            "product": {
              "name": "automation-controller.src",
              "product_id": "automation-controller.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/automation-controller?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "automation-eda-controller.src",
            "product": {
              "name": "automation-eda-controller.src",
              "product_id": "automation-eda-controller.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/automation-eda-controller?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "automation-gateway.src",
            "product": {
              "name": "automation-gateway.src",
              "product_id": "automation-gateway.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/automation-gateway?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "automation-platform-ui.src",
            "product": {
              "name": "automation-platform-ui.src",
              "product_id": "automation-platform-ui.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/automation-platform-ui?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "io.hawt-project",
            "product": {
              "name": "io.hawt-project",
              "product_id": "io.hawt-project",
              "product_identification_helper": {
                "purl": "pkg:generic/redhat/io.hawt-project"
              }
            }
          },
          {
            "category": "product_version",
            "name": "io.apicurio-apicurio-registry",
            "product": {
              "name": "io.apicurio-apicurio-registry",
              "product_id": "io.apicurio-apicurio-registry",
              "product_identification_helper": {
                "purl": "pkg:generic/redhat/io.apicurio-apicurio-registry"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-selinux",
            "product": {
              "name": "grafana-selinux",
              "product_id": "grafana-selinux",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-selinux"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana.src",
            "product": {
              "name": "grafana.src",
              "product_id": "grafana.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana",
            "product": {
              "name": "grafana",
              "product_id": "grafana",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-mysql",
            "product": {
              "name": "grafana-mysql",
              "product_id": "grafana-mysql",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-mysql"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-mssql",
            "product": {
              "name": "grafana-mssql",
              "product_id": "grafana-mssql",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-mssql"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-postgres",
            "product": {
              "name": "grafana-postgres",
              "product_id": "grafana-postgres",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-postgres"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-stackdriver",
            "product": {
              "name": "grafana-stackdriver",
              "product_id": "grafana-stackdriver",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-stackdriver"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-graphite",
            "product": {
              "name": "grafana-graphite",
              "product_id": "grafana-graphite",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-graphite"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-elasticsearch",
            "product": {
              "name": "grafana-elasticsearch",
              "product_id": "grafana-elasticsearch",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-elasticsearch"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-azure-monitor",
            "product": {
              "name": "grafana-azure-monitor",
              "product_id": "grafana-azure-monitor",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-azure-monitor"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-opentsdb",
            "product": {
              "name": "grafana-opentsdb",
              "product_id": "grafana-opentsdb",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-opentsdb"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-prometheus",
            "product": {
              "name": "grafana-prometheus",
              "product_id": "grafana-prometheus",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-prometheus"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-loki",
            "product": {
              "name": "grafana-loki",
              "product_id": "grafana-loki",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-loki"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-cloudwatch",
            "product": {
              "name": "grafana-cloudwatch",
              "product_id": "grafana-cloudwatch",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-cloudwatch"
              }
            }
          },
          {
            "category": "product_version",
            "name": "grafana-influxdb",
            "product": {
              "name": "grafana-influxdb",
              "product_id": "grafana-influxdb",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/grafana-influxdb"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-dashboard-rhel9",
            "product": {
              "name": "rhoai/odh-dashboard-rhel9",
              "product_id": "rhoai/odh-dashboard-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-dashboard-rhel9?repository_url=registry.redhat.io/rhoai/odh-dashboard-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "product": {
              "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
              "product_id": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel8?repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "product": {
              "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
              "product_id": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel8?repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-gen-ai-rhel9",
              "product_id": "rhoai/odh-mod-arch-gen-ai-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-gen-ai-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": {
              "name": "rhoai/odh-mod-arch-model-registry-rhel9",
              "product_id": "rhoai/odh-mod-arch-model-registry-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-mod-arch-model-registry-rhel9?repository_url=registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhoai/odh-model-registry-rhel8",
            "product": {
              "name": "rhoai/odh-model-registry-rhel8",
              "product_id": "rhoai/odh-model-registry-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/odh-model-registry-rhel8?repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-console",
            "product": {
              "name": "openshift4/ose-console",
              "product_id": "openshift4/ose-console",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-console?repository_url=registry.redhat.io/openshift4/ose-console"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-console-rhel9",
            "product": {
              "name": "openshift4/ose-console-rhel9",
              "product_id": "openshift4/ose-console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-console-rhel9?repository_url=registry.redhat.io/openshift4/ose-console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift4/ose-monitoring-plugin-rhel9",
            "product": {
              "name": "openshift4/ose-monitoring-plugin-rhel9",
              "product_id": "openshift4/ose-monitoring-plugin-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/ose-monitoring-plugin-rhel9?repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "odf4/ocs-client-console-rhel9",
            "product": {
              "name": "odf4/ocs-client-console-rhel9",
              "product_id": "odf4/ocs-client-console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/ocs-client-console-rhel9?repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "odf4/odf-console-rhel9",
            "product": {
              "name": "odf4/odf-console-rhel9",
              "product_id": "odf4/odf-console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odf-console-rhel9?repository_url=registry.redhat.io/odf4/odf-console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "odf4/odf-multicluster-console-rhel9",
            "product": {
              "name": "odf4/odf-multicluster-console-rhel9",
              "product_id": "odf4/odf-multicluster-console-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/odf-multicluster-console-rhel9?repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-gitops-1/argocd-rhel8",
            "product": {
              "name": "openshift-gitops-1/argocd-rhel8",
              "product_id": "openshift-gitops-1/argocd-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/argocd-rhel8?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-gitops-1/argocd-rhel9",
            "product": {
              "name": "openshift-gitops-1/argocd-rhel9",
              "product_id": "openshift-gitops-1/argocd-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/argocd-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openshift-gitops-1/console-plugin-rhel8",
            "product": {
              "name": "openshift-gitops-1/console-plugin-rhel8",
              "product_id": "openshift-gitops-1/console-plugin-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/console-plugin-rhel8?repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "container-native-virtualization/kubevirt-console-plugin",
            "product": {
              "name": "container-native-virtualization/kubevirt-console-plugin",
              "product_id": "container-native-virtualization/kubevirt-console-plugin",
              "product_identification_helper": {
                "purl": "pkg:oci/kubevirt-console-plugin?repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin"
              }
            }
          },
          {
            "category": "product_version",
            "name": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": {
              "name": "container-native-virtualization/kubevirt-console-plugin-rhel9",
              "product_id": "container-native-virtualization/kubevirt-console-plugin-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/kubevirt-console-plugin-rhel9?repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "org.kie-process-migration-service",
            "product": {
              "name": "org.kie-process-migration-service",
              "product_id": "org.kie-process-migration-service",
              "product_identification_helper": {
                "purl": "pkg:generic/redhat/org.kie-process-migration-service"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ansible-automation-platform/automation-portal",
            "product": {
              "name": "ansible-automation-platform/automation-portal",
              "product_id": "ansible-automation-platform/automation-portal",
              "product_identification_helper": {
                "purl": "pkg:oci/automation-portal?repository_url=registry.redhat.io/ansible-automation-platform/automation-portal"
              }
            }
          },
          {
            "category": "product_version",
            "name": "com.github.streamshub-console",
            "product": {
              "name": "com.github.streamshub-console",
              "product_id": "com.github.streamshub-console",
              "product_identification_helper": {
                "purl": "pkg:generic/redhat/com.github.streamshub-console"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "io.cryostat-cryostat as a component of Cryostat 4",
          "product_id": "cryostat_4:io.cryostat-cryostat"
        },
        "product_reference": "io.cryostat-cryostat",
        "relates_to_product_reference": "cryostat_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "migration-toolkit-virtualization/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization",
          "product_id": "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9"
        },
        "product_reference": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
        "relates_to_product_reference": "migration_toolkit_for_virtualization"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mtv-candidate/mtv-console-plugin-rhel9 as a component of Migration Toolkit for Virtualization",
          "product_id": "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9"
        },
        "product_reference": "mtv-candidate/mtv-console-plugin-rhel9",
        "relates_to_product_reference": "migration_toolkit_for_virtualization"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes",
          "product_id": "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9"
        },
        "product_reference": "multicluster-engine/console-mce-rhel9",
        "relates_to_product_reference": "multicluster_engine_for_kubernetes"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-console-plugin-compat-rhel9 as a component of Network Observability Operator",
          "product_id": "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9"
        },
        "product_reference": "network-observability/network-observability-console-plugin-compat-rhel9",
        "relates_to_product_reference": "network_observability_operator"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "workload-availability/node-healthcheck-must-gather-rhel9 as a component of Node HealthCheck Operator",
          "product_id": "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9"
        },
        "product_reference": "workload-availability/node-healthcheck-must-gather-rhel9",
        "relates_to_product_reference": "node_healthcheck_operator"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "workload-availability/node-healthcheck-operator-bundle as a component of Node HealthCheck Operator",
          "product_id": "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle"
        },
        "product_reference": "workload-availability/node-healthcheck-operator-bundle",
        "relates_to_product_reference": "node_healthcheck_operator"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "workload-availability/node-healthcheck-rhel9-operator as a component of Node HealthCheck Operator",
          "product_id": "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator"
        },
        "product_reference": "workload-availability/node-healthcheck-rhel9-operator",
        "relates_to_product_reference": "node_healthcheck_operator"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "workload-availability/node-remediation-console-rhel9 as a component of Node HealthCheck Operator",
          "product_id": "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9"
        },
        "product_reference": "workload-availability/node-remediation-console-rhel9",
        "relates_to_product_reference": "node_healthcheck_operator"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-pipelines/pipelines-hub-api-rhel8 as a component of OpenShift Pipelines",
          "product_id": "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8"
        },
        "product_reference": "openshift-pipelines/pipelines-hub-api-rhel8",
        "relates_to_product_reference": "openshift_pipelines"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-pipelines/pipelines-hub-db-migration-rhel8 as a component of OpenShift Pipelines",
          "product_id": "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8"
        },
        "product_reference": "openshift-pipelines/pipelines-hub-db-migration-rhel8",
        "relates_to_product_reference": "openshift_pipelines"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines",
          "product_id": "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8"
        },
        "product_reference": "openshift-pipelines/pipelines-hub-ui-rhel8",
        "relates_to_product_reference": "openshift_pipelines"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel7 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7"
        },
        "product_reference": "3scale-amp2/system-rhel7",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel8 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8"
        },
        "product_reference": "3scale-amp2/system-rhel8",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel9 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9"
        },
        "product_reference": "3scale-amp2/system-rhel9",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp20/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp20/system"
        },
        "product_reference": "3scale-amp20/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp21/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp21/system"
        },
        "product_reference": "3scale-amp21/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp22/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp22/system"
        },
        "product_reference": "3scale-amp22/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp24/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp24/system"
        },
        "product_reference": "3scale-amp24/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp25/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp25/system"
        },
        "product_reference": "3scale-amp25/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp26/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp26/system"
        },
        "product_reference": "3scale-amp26/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2",
          "product_id": "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9"
        },
        "product_reference": "rhacm2/console-rhel9",
        "relates_to_product_reference": "red_hat_advanced_cluster_management_for_kubernetes_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4",
          "product_id": "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8"
        },
        "product_reference": "advanced-cluster-security/rhacs-main-rhel8",
        "relates_to_product_reference": "red_hat_advanced_cluster_security_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform-26/gateway-rhel9 as a component of Red Hat Ansible Automation Platform 2",
          "product_id": "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9"
        },
        "product_reference": "ansible-automation-platform-26/gateway-rhel9",
        "relates_to_product_reference": "red_hat_ansible_automation_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-controller.src as a component of Red Hat Ansible Automation Platform 2",
          "product_id": "red_hat_ansible_automation_platform_2:automation-controller.src"
        },
        "product_reference": "automation-controller.src",
        "relates_to_product_reference": "red_hat_ansible_automation_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-eda-controller.src as a component of Red Hat Ansible Automation Platform 2",
          "product_id": "red_hat_ansible_automation_platform_2:automation-eda-controller.src"
        },
        "product_reference": "automation-eda-controller.src",
        "relates_to_product_reference": "red_hat_ansible_automation_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-gateway.src as a component of Red Hat Ansible Automation Platform 2",
          "product_id": "red_hat_ansible_automation_platform_2:automation-gateway.src"
        },
        "product_reference": "automation-gateway.src",
        "relates_to_product_reference": "red_hat_ansible_automation_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2",
          "product_id": "red_hat_ansible_automation_platform_2:automation-platform-ui.src"
        },
        "product_reference": "automation-platform-ui.src",
        "relates_to_product_reference": "red_hat_ansible_automation_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "io.hawt-project as a component of Red Hat build of Apache Camel - HawtIO 4",
          "product_id": "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project"
        },
        "product_reference": "io.hawt-project",
        "relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "io.apicurio-apicurio-registry as a component of Red Hat build of Apicurio Registry 2",
          "product_id": "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry"
        },
        "product_reference": "io.apicurio-apicurio-registry",
        "relates_to_product_reference": "red_hat_build_of_apicurio_registry_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:grafana"
        },
        "product_reference": "grafana",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:grafana-selinux"
        },
        "product_reference": "grafana-selinux",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:grafana.src"
        },
        "product_reference": "grafana.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana"
        },
        "product_reference": "grafana",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-azure-monitor as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-azure-monitor"
        },
        "product_reference": "grafana-azure-monitor",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-cloudwatch as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-cloudwatch"
        },
        "product_reference": "grafana-cloudwatch",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-elasticsearch as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-elasticsearch"
        },
        "product_reference": "grafana-elasticsearch",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-graphite as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-graphite"
        },
        "product_reference": "grafana-graphite",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-influxdb as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-influxdb"
        },
        "product_reference": "grafana-influxdb",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-loki as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-loki"
        },
        "product_reference": "grafana-loki",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-mssql as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-mssql"
        },
        "product_reference": "grafana-mssql",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-mysql as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-mysql"
        },
        "product_reference": "grafana-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-opentsdb as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-opentsdb"
        },
        "product_reference": "grafana-opentsdb",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-postgres as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-postgres"
        },
        "product_reference": "grafana-postgres",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-prometheus as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-prometheus"
        },
        "product_reference": "grafana-prometheus",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-selinux"
        },
        "product_reference": "grafana-selinux",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-stackdriver as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana-stackdriver"
        },
        "product_reference": "grafana-stackdriver",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:grafana.src"
        },
        "product_reference": "grafana.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:grafana"
        },
        "product_reference": "grafana",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:grafana-selinux"
        },
        "product_reference": "grafana-selinux",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:grafana.src"
        },
        "product_reference": "grafana.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9"
        },
        "product_reference": "rhoai/odh-dashboard-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8"
        },
        "product_reference": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8"
        },
        "product_reference": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-gen-ai-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9"
        },
        "product_reference": "rhoai/odh-mod-arch-model-registry-rhel9",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhoai/odh-model-registry-rhel8 as a component of Red Hat OpenShift AI (RHOAI)",
          "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8"
        },
        "product_reference": "rhoai/odh-model-registry-rhel8",
        "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-console as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openshift4/ose-console"
        },
        "product_reference": "openshift4/ose-console",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-console-rhel9 as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9"
        },
        "product_reference": "openshift4/ose-console-rhel9",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/ose-monitoring-plugin-rhel9 as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9"
        },
        "product_reference": "openshift4/ose-monitoring-plugin-rhel9",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "odf4/ocs-client-console-rhel9 as a component of Red Hat Openshift Data Foundation 4",
          "product_id": "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9"
        },
        "product_reference": "odf4/ocs-client-console-rhel9",
        "relates_to_product_reference": "red_hat_openshift_data_foundation_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "odf4/odf-console-rhel9 as a component of Red Hat Openshift Data Foundation 4",
          "product_id": "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9"
        },
        "product_reference": "odf4/odf-console-rhel9",
        "relates_to_product_reference": "red_hat_openshift_data_foundation_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "odf4/odf-multicluster-console-rhel9 as a component of Red Hat Openshift Data Foundation 4",
          "product_id": "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9"
        },
        "product_reference": "odf4/odf-multicluster-console-rhel9",
        "relates_to_product_reference": "red_hat_openshift_data_foundation_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel8 as a component of Red Hat OpenShift GitOps",
          "product_id": "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel8",
        "relates_to_product_reference": "red_hat_openshift_gitops"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/argocd-rhel9 as a component of Red Hat OpenShift GitOps",
          "product_id": "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9"
        },
        "product_reference": "openshift-gitops-1/argocd-rhel9",
        "relates_to_product_reference": "red_hat_openshift_gitops"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-gitops-1/console-plugin-rhel8 as a component of Red Hat OpenShift GitOps",
          "product_id": "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8"
        },
        "product_reference": "openshift-gitops-1/console-plugin-rhel8",
        "relates_to_product_reference": "red_hat_openshift_gitops"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-console-plugin as a component of Red Hat OpenShift Virtualization 4",
          "product_id": "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin"
        },
        "product_reference": "container-native-virtualization/kubevirt-console-plugin",
        "relates_to_product_reference": "red_hat_openshift_virtualization_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-console-plugin-rhel9 as a component of Red Hat OpenShift Virtualization 4",
          "product_id": "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9"
        },
        "product_reference": "container-native-virtualization/kubevirt-console-plugin-rhel9",
        "relates_to_product_reference": "red_hat_openshift_virtualization_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "org.kie-process-migration-service as a component of Red Hat Process Automation 7",
          "product_id": "red_hat_process_automation_7:org.kie-process-migration-service"
        },
        "product_reference": "org.kie-process-migration-service",
        "relates_to_product_reference": "red_hat_process_automation_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-automation-platform/automation-portal as a component of Self-service automation portal 2",
          "product_id": "self-service_automation_portal_2:ansible-automation-platform/automation-portal"
        },
        "product_reference": "ansible-automation-platform/automation-portal",
        "relates_to_product_reference": "self-service_automation_portal_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "com.github.streamshub-console as a component of streams for Apache Kafka 2",
          "product_id": "streams_for_apache_kafka_2:com.github.streamshub-console"
        },
        "product_reference": "com.github.streamshub-console",
        "relates_to_product_reference": "streams_for_apache_kafka_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "com.github.streamshub-console as a component of streams for Apache Kafka 3",
          "product_id": "streams_for_apache_kafka_3:com.github.streamshub-console"
        },
        "product_reference": "com.github.streamshub-console",
        "relates_to_product_reference": "streams_for_apache_kafka_3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-15599",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "discovery_date": "2026-03-03T18:01:13.029972+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2444138"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DOMPurify, a library designed to prevent web vulnerabilities. A remote attacker can exploit a cross-site scripting (XSS) vulnerability by bypassing the library's sanitization process. This bypass is possible due to improper validation of `textarea` rawtext elements, allowing attackers to inject malicious code. Successful exploitation could lead to arbitrary JavaScript execution in a user's browser, potentially compromising user sessions or disclosing sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "DOMPurify: DOMPurify: Cross-site scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "cryostat_4:io.cryostat-cryostat",
          "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9",
          "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9",
          "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
          "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9",
          "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9",
          "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle",
          "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator",
          "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9",
          "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8",
          "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8",
          "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
          "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
          "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
          "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8",
          "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9",
          "red_hat_ansible_automation_platform_2:automation-controller.src",
          "red_hat_ansible_automation_platform_2:automation-eda-controller.src",
          "red_hat_ansible_automation_platform_2:automation-gateway.src",
          "red_hat_ansible_automation_platform_2:automation-platform-ui.src",
          "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project",
          "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry",
          "red_hat_enterprise_linux_10:grafana",
          "red_hat_enterprise_linux_10:grafana-selinux",
          "red_hat_enterprise_linux_10:grafana.src",
          "red_hat_enterprise_linux_8:grafana",
          "red_hat_enterprise_linux_8:grafana-azure-monitor",
          "red_hat_enterprise_linux_8:grafana-cloudwatch",
          "red_hat_enterprise_linux_8:grafana-elasticsearch",
          "red_hat_enterprise_linux_8:grafana-graphite",
          "red_hat_enterprise_linux_8:grafana-influxdb",
          "red_hat_enterprise_linux_8:grafana-loki",
          "red_hat_enterprise_linux_8:grafana-mssql",
          "red_hat_enterprise_linux_8:grafana-mysql",
          "red_hat_enterprise_linux_8:grafana-opentsdb",
          "red_hat_enterprise_linux_8:grafana-postgres",
          "red_hat_enterprise_linux_8:grafana-prometheus",
          "red_hat_enterprise_linux_8:grafana-selinux",
          "red_hat_enterprise_linux_8:grafana-stackdriver",
          "red_hat_enterprise_linux_8:grafana.src",
          "red_hat_enterprise_linux_9:grafana",
          "red_hat_enterprise_linux_9:grafana-selinux",
          "red_hat_enterprise_linux_9:grafana.src",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9",
          "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8",
          "red_hat_openshift_container_platform_4:openshift4/ose-console",
          "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9",
          "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9",
          "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9",
          "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9",
          "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9",
          "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8",
          "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9",
          "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8",
          "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin",
          "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9",
          "red_hat_process_automation_7:org.kie-process-migration-service",
          "self-service_automation_portal_2:ansible-automation-platform/automation-portal",
          "streams_for_apache_kafka_2:com.github.streamshub-console",
          "streams_for_apache_kafka_3:com.github.streamshub-console"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-15599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2444138",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444138"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-15599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-15599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15599"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify",
          "url": "https://github.com/cure53/DOMPurify"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/commit/c861f5a83fb8d90800f1680f855fee551161ac2b",
          "url": "https://github.com/cure53/DOMPurify/commit/c861f5a83fb8d90800f1680f855fee551161ac2b"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/dompurify-xss-via-textarea-rawtext-bypass-in-safeforxml",
          "url": "https://www.vulncheck.com/advisories/dompurify-xss-via-textarea-rawtext-bypass-in-safeforxml"
        }
      ],
      "release_date": "2026-03-03T17:26:05.711000+00:00",
      "remediations": [
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "cryostat_4:io.cryostat-cryostat",
            "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle",
            "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator",
            "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8",
            "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9",
            "red_hat_ansible_automation_platform_2:automation-controller.src",
            "red_hat_ansible_automation_platform_2:automation-eda-controller.src",
            "red_hat_ansible_automation_platform_2:automation-gateway.src",
            "red_hat_ansible_automation_platform_2:automation-platform-ui.src",
            "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project",
            "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry",
            "red_hat_enterprise_linux_10:grafana",
            "red_hat_enterprise_linux_10:grafana-selinux",
            "red_hat_enterprise_linux_10:grafana.src",
            "red_hat_enterprise_linux_8:grafana",
            "red_hat_enterprise_linux_8:grafana-azure-monitor",
            "red_hat_enterprise_linux_8:grafana-cloudwatch",
            "red_hat_enterprise_linux_8:grafana-elasticsearch",
            "red_hat_enterprise_linux_8:grafana-graphite",
            "red_hat_enterprise_linux_8:grafana-influxdb",
            "red_hat_enterprise_linux_8:grafana-loki",
            "red_hat_enterprise_linux_8:grafana-mssql",
            "red_hat_enterprise_linux_8:grafana-mysql",
            "red_hat_enterprise_linux_8:grafana-opentsdb",
            "red_hat_enterprise_linux_8:grafana-postgres",
            "red_hat_enterprise_linux_8:grafana-prometheus",
            "red_hat_enterprise_linux_8:grafana-selinux",
            "red_hat_enterprise_linux_8:grafana-stackdriver",
            "red_hat_enterprise_linux_8:grafana.src",
            "red_hat_enterprise_linux_9:grafana",
            "red_hat_enterprise_linux_9:grafana-selinux",
            "red_hat_enterprise_linux_9:grafana.src",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8",
            "red_hat_openshift_container_platform_4:openshift4/ose-console",
            "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9",
            "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9",
            "red_hat_process_automation_7:org.kie-process-migration-service",
            "self-service_automation_portal_2:ansible-automation-platform/automation-portal",
            "streams_for_apache_kafka_2:com.github.streamshub-console",
            "streams_for_apache_kafka_3:com.github.streamshub-console"
          ]
        },
        {
          "category": "none_available",
          "details": "Fix deferred",
          "product_ids": [
            "cryostat_4:io.cryostat-cryostat",
            "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle",
            "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator",
            "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8",
            "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9",
            "red_hat_ansible_automation_platform_2:automation-controller.src",
            "red_hat_ansible_automation_platform_2:automation-eda-controller.src",
            "red_hat_ansible_automation_platform_2:automation-gateway.src",
            "red_hat_ansible_automation_platform_2:automation-platform-ui.src",
            "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project",
            "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry",
            "red_hat_enterprise_linux_10:grafana",
            "red_hat_enterprise_linux_10:grafana-selinux",
            "red_hat_enterprise_linux_10:grafana.src",
            "red_hat_enterprise_linux_8:grafana",
            "red_hat_enterprise_linux_8:grafana-azure-monitor",
            "red_hat_enterprise_linux_8:grafana-cloudwatch",
            "red_hat_enterprise_linux_8:grafana-elasticsearch",
            "red_hat_enterprise_linux_8:grafana-graphite",
            "red_hat_enterprise_linux_8:grafana-influxdb",
            "red_hat_enterprise_linux_8:grafana-loki",
            "red_hat_enterprise_linux_8:grafana-mssql",
            "red_hat_enterprise_linux_8:grafana-mysql",
            "red_hat_enterprise_linux_8:grafana-opentsdb",
            "red_hat_enterprise_linux_8:grafana-postgres",
            "red_hat_enterprise_linux_8:grafana-prometheus",
            "red_hat_enterprise_linux_8:grafana-selinux",
            "red_hat_enterprise_linux_8:grafana-stackdriver",
            "red_hat_enterprise_linux_8:grafana.src",
            "red_hat_enterprise_linux_9:grafana",
            "red_hat_enterprise_linux_9:grafana-selinux",
            "red_hat_enterprise_linux_9:grafana.src",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8",
            "red_hat_openshift_container_platform_4:openshift4/ose-console",
            "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9",
            "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9",
            "red_hat_process_automation_7:org.kie-process-migration-service",
            "self-service_automation_portal_2:ansible-automation-platform/automation-portal",
            "streams_for_apache_kafka_2:com.github.streamshub-console",
            "streams_for_apache_kafka_3:com.github.streamshub-console"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "cryostat_4:io.cryostat-cryostat",
            "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle",
            "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator",
            "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8",
            "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9",
            "red_hat_ansible_automation_platform_2:automation-controller.src",
            "red_hat_ansible_automation_platform_2:automation-eda-controller.src",
            "red_hat_ansible_automation_platform_2:automation-gateway.src",
            "red_hat_ansible_automation_platform_2:automation-platform-ui.src",
            "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project",
            "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry",
            "red_hat_enterprise_linux_10:grafana",
            "red_hat_enterprise_linux_10:grafana-selinux",
            "red_hat_enterprise_linux_10:grafana.src",
            "red_hat_enterprise_linux_8:grafana",
            "red_hat_enterprise_linux_8:grafana-azure-monitor",
            "red_hat_enterprise_linux_8:grafana-cloudwatch",
            "red_hat_enterprise_linux_8:grafana-elasticsearch",
            "red_hat_enterprise_linux_8:grafana-graphite",
            "red_hat_enterprise_linux_8:grafana-influxdb",
            "red_hat_enterprise_linux_8:grafana-loki",
            "red_hat_enterprise_linux_8:grafana-mssql",
            "red_hat_enterprise_linux_8:grafana-mysql",
            "red_hat_enterprise_linux_8:grafana-opentsdb",
            "red_hat_enterprise_linux_8:grafana-postgres",
            "red_hat_enterprise_linux_8:grafana-prometheus",
            "red_hat_enterprise_linux_8:grafana-selinux",
            "red_hat_enterprise_linux_8:grafana-stackdriver",
            "red_hat_enterprise_linux_8:grafana.src",
            "red_hat_enterprise_linux_9:grafana",
            "red_hat_enterprise_linux_9:grafana-selinux",
            "red_hat_enterprise_linux_9:grafana.src",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8",
            "red_hat_openshift_container_platform_4:openshift4/ose-console",
            "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9",
            "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9",
            "red_hat_process_automation_7:org.kie-process-migration-service",
            "self-service_automation_portal_2:ansible-automation-platform/automation-portal",
            "streams_for_apache_kafka_2:com.github.streamshub-console",
            "streams_for_apache_kafka_3:com.github.streamshub-console"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "cryostat_4:io.cryostat-cryostat",
            "migration_toolkit_for_virtualization:migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "migration_toolkit_for_virtualization:mtv-candidate/mtv-console-plugin-rhel9",
            "multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9",
            "network_observability_operator:network-observability/network-observability-console-plugin-compat-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-must-gather-rhel9",
            "node_healthcheck_operator:workload-availability/node-healthcheck-operator-bundle",
            "node_healthcheck_operator:workload-availability/node-healthcheck-rhel9-operator",
            "node_healthcheck_operator:workload-availability/node-remediation-console-rhel9",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-api-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-db-migration-rhel8",
            "openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9",
            "red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8",
            "red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9",
            "red_hat_ansible_automation_platform_2:automation-controller.src",
            "red_hat_ansible_automation_platform_2:automation-eda-controller.src",
            "red_hat_ansible_automation_platform_2:automation-gateway.src",
            "red_hat_ansible_automation_platform_2:automation-platform-ui.src",
            "red_hat_build_of_apache_camel_-_hawtio_4:io.hawt-project",
            "red_hat_build_of_apicurio_registry_2:io.apicurio-apicurio-registry",
            "red_hat_enterprise_linux_10:grafana",
            "red_hat_enterprise_linux_10:grafana-selinux",
            "red_hat_enterprise_linux_10:grafana.src",
            "red_hat_enterprise_linux_8:grafana",
            "red_hat_enterprise_linux_8:grafana-azure-monitor",
            "red_hat_enterprise_linux_8:grafana-cloudwatch",
            "red_hat_enterprise_linux_8:grafana-elasticsearch",
            "red_hat_enterprise_linux_8:grafana-graphite",
            "red_hat_enterprise_linux_8:grafana-influxdb",
            "red_hat_enterprise_linux_8:grafana-loki",
            "red_hat_enterprise_linux_8:grafana-mssql",
            "red_hat_enterprise_linux_8:grafana-mysql",
            "red_hat_enterprise_linux_8:grafana-opentsdb",
            "red_hat_enterprise_linux_8:grafana-postgres",
            "red_hat_enterprise_linux_8:grafana-prometheus",
            "red_hat_enterprise_linux_8:grafana-selinux",
            "red_hat_enterprise_linux_8:grafana-stackdriver",
            "red_hat_enterprise_linux_8:grafana.src",
            "red_hat_enterprise_linux_9:grafana",
            "red_hat_enterprise_linux_9:grafana-selinux",
            "red_hat_enterprise_linux_9:grafana.src",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-gen-ai-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-model-registry-rhel9",
            "red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel8",
            "red_hat_openshift_container_platform_4:openshift4/ose-console",
            "red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9",
            "red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9",
            "red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8",
            "red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9",
            "red_hat_openshift_gitops:openshift-gitops-1/console-plugin-rhel8",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin",
            "red_hat_openshift_virtualization_4:container-native-virtualization/kubevirt-console-plugin-rhel9",
            "red_hat_process_automation_7:org.kie-process-migration-service",
            "self-service_automation_portal_2:ansible-automation-platform/automation-portal",
            "streams_for_apache_kafka_2:com.github.streamshub-console",
            "streams_for_apache_kafka_3:com.github.streamshub-console"
          ]
        }
      ],
      "title": "DOMPurify: DOMPurify: Cross-site scripting"
    }
  ]
}