RHSA-2026:24473HighCVSS 8.8

Red Hat Security Advisory: Network Observability 1.12.0 for OpenShift

Published
June 8, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (5)

CVE-2026-6321 →CVE-2026-29063 →CVE-2026-32281 →CVE-2026-42039 →CVE-2026-42044 →

📋 Description

CVE-2026-6321 — fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies CVE-2026-29063 — immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-42039 — axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data CVE-2026-42044 — axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

🎯 Affected products30

  • Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:186107c5889c721393d00060b289b7de12d09eb8948bf6a6b47de1ff7cd378fd_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:770f6d640f9626bebb25cbae05548d491a3de298951ac95545fda04c0ec98910_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b29292d1baad6fbc3166f73fc7f9ad2e2b2d4c28c0b4335037920319965242ce_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:d989a27be48501bd25ddc7a31d4267da3ad5f22d83cc144c0e5b5b8d8a6c1e3a_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:18b40e8768140b29a15e46db3628f07fc638d3014ec0aa9a8d8c1eeeb94165f5_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:2a0af571487743e5a9ac8207197653f03473a9f11c1e8dd0a8dc7cc969750ece_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:3229843db1b2a1d3991f46cf85946600167f29f946003d81210a9ce10fd32b1f_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:92f200153dbb9775709821466162f8520cf79c3acd03fffa9863c9e0ed60222a_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:4473fa91d93195bd59745b98a7bf957a82301f1ed05ea88d46f5ea17adec8c0f_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:53c3a661e71297d0e646c60dd0aba4a35958dd3cd39b150c03b23e93b4488db6_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:86ac6723b521b8650d618b6a203b27fd75e13451e5c839fd290e1b884efa5fbe_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:c392749e55b4f52dec2df847b855fe0e857933183f99fb59fe0ca4f13f2cd710_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:2ad4f88f7bd6faa39c05f319e9bcc868b2858f36f0b6ffea5a94af9f7e326bf5_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:709deb067255347bf18c033206e5387717a84710c1f15a3df6b905ebfcc13774_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:710832f31eaaf9c5824d42010d8394191221a66f5b6f3f1769aee03a995e2c0f_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b84d56f497720d1482ec1cf649238a87bd2864c1c5a90da80a30c05d2f6ca3d1_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:7a48e772d5300ddcfc16d4315709a0cbe6c2173ddc2a86390076ea070fb6a6d4_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:af9f0daa8cd435af63edbbdbe2f1666486d3cf5d5fc217d7e3c62676cc0910a2_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:d683a66ddb3353d73bed2175d0327c03e75e86127e066b866d860cabd86b3d89_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:f156ec35b1d0c622b45f3301bf5b272327afca9c693e48ed0f4250968d31e3ac_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:15cf18699235a8402829972b354f647a5f476fe23fa5d73178975ef8db06bfef_arm64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:2944134efddc84078eb3758b2908d31be84f78c75cae1cac5c10ed6b6a1dd45d_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:495f702fe42bf2ed674eac5050fd8d44b7e9a9e7873635c8785e6b5643cda4c6_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b3040a476d85a4ea7f80107bb52aa07a35205df9a582275c4ea5850e134f37ed_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:3334ff41c9a32e1adab61a312fbfe23a993e9e66eb67ebaad1333916823a8311_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:177faa07236fc15662f486f1af148c99479c7a239ed62e11f7c12e5b72d7cb8c_amd64 as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:47f75fb1ed88ceefb131d6412f858b62f241d8e35ebc85a4ced6926268c4f071_s390x as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:5c7ad860ba235237f944db137098153d3a1d7a3f2fa628815d57ce1226378c41_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3
  • registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:d54eddf15df440962bd24a37f77e7fe75e38ef770f04fa0491cc86d6d1afe171_arm64 as a component of Network Observability (NETOBSERV) 1.12.3

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)