ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
zetlyn/cve-redhat vulnerability cve CVE-2026-45736 known 2026-05-15
https://access.redhat.com/security/cve/CVE-2026-45736
Properties
| cvss | 7.5receipt
What the source handed over{
"CVE": "CVE-2026-45736",
"CWE": "CWE-824",
"advisories": [
"RHSA-2026:48151",
"RHSA-2026:29197",
"RHSA-2026:48693",
"RHSA-2026:56431",
"RHSA-2026:33574",
"RHSA-2026:36820",
"RHSA-2026:27171",
"RHSA-2026:57590",
"RHSA-2026:65126",
"RHSA-2026:34374",
"RHSA-2026:70829",
"RHSA-2026:26638",
"RHSA-2026:44267",
"RHSA-2026:40768",
"RHSA-2026:26994",
"RHSA-2026:41928",
"RHSA-2026:56366",
"RHSA-2026:44263",
"RHSA-2026:36754",
"RHSA-2026:57013",
"RHSA-2026:56928",
"RHSA-2026:66488",
"RHSA-2026:40792",
"RHSA-2026:37272",
"RHSA-2026:66545",
"RHSA-2026:7655",
"RHSA-2026:60520",
"RHSA-2026:44235"
],
"affected_packages": [
"odf4/mcg-core-rhel9:1786705558",
"odf4/odf-cosi-sidecar-rhel9:1786627382",
"odf4/rook-ceph-rhel9-operator:1787061554",
"odf4/ocs-client-rhel9-operator:1786705741",
"openshift4/ose-monitoring-plugin-rhel9:1784670101",
"odf4/odf-drbd-rhel9:1787059538",
"odf4/odf-cloudnative-pg-rhel9-operator:1786631508",
"odf4/rook-ceph-rhel9-operator:1786703143",
"openshift4/ose-monitoring-plugin-rhel9:1784730857",
"odf4/odf-csi-addons-sidecar-rhel9:1786706188",
"odf4/mcg-core-rhel9:1786702052",
"odf4/odf-lightspeed-rag-content-rhel9:1787059085",
"odf4/odf-cli-rhel9:1786705938",
"odf4/odf-console-rhel9:1787059072",
"odf4/cephcsi-rhel9:1786627460",
"odf4/cephcsi-rhel9-operator:1787057964",
"odf4/odf-rhel9-operator:1787060105",
"odf4/odf-csi-addons-sidecar-rhel9:1786629076",
"odf4/mcg-rhel9-operator:1786702559",
"rhtas/rekor-search-ui-rhel9:1783327185",
"rhoai/odh-dashboard-rhel9:1787347991",
"odf4/rook-ceph-rhel9-operator:1786629548",
"ansible-automation-platform-26/gateway-rhel9:1782761510",
"rhdh/rhdh-hub-rhel9:1782761244",
"openshift4/ose-monitoring-plugin-rhel9:1784144936",
"odf4/ocs-metrics-exporter-rhel9:1787060257",
"odf4/odf-rhel9-operator:1786632256",
"odf4/odf-csi-addons-rhel9-operator:1786706177",
"openshift4/ose-agent-installer-ui-rhel9:1785230147",
"rhoai/odh-mod-arch-model-registry-rhel9:1787250617",
"odf4/odf-multicluster-console-rhel9:1787059621",
"odf4/odf-multicluster-console-rhel9:1786688215",
"odf4/mcg-rhel9-operator:1786627106",
"odf4/odr-volsync-plugin-mover-rhel9:1787060201",
"devspaces/dashboard-rhel9:1782498792",
"odf4/odf-multicluster-rhel9-operator:1786628340",
"odf4/odf-csi-addons-sidecar-rhel9:1787058970",
"odf4/mcg-rhel9-operator:1786705646",
"devspaces/code-rhel9:1782498475",
"openshift4/ose-agent-installer-ui-rhel9:1784713741",
"rhdh/rhdh-hub-rhel9:1783448184",
"rhoai/odh-mod-arch-automl-rhel9:1787250508",
"odf4/odf-must-gather-rhel9:1786702872",
"openshift4/ose-agent-installer-ui-rhel9:1784724699",
"odf4/odf-console-rhel9:1786703071",
"cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-13",
"rhoai/odh-mod-arch-autorag-rhel9:1787251550",
"odf4/odf-external-snapshotter-rhel9-operator:1786627469",
"rhoai/odh-mod-arch-maas-rhel9:1787251250",
"discovery/discovery-ui-rhel9:1782166952",
"odf4/odf-cosi-sidecar-rhel9:1786706125",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527",
"odf4/odf-external-snapshotter-sidecar-rhel9:1787061098",
"odf4/odf-multicluster-console-rhel9:1786706679",
"odf4/ocs-client-console-rhel9:1786702713",
"odf4/ocs-client-console-rhel9:1786629761",
"odf4/cephcsi-rhel9:1787057250",
"openshift4/ose-monitoring-plugin-rhel9:1784127553",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387",
"rhoai/odh-mod-arch-gen-ai-rhel9:1786611759",
"dotnet10-0-main-10.0.109-1.hum1",
"odf4/cephcsi-rhel9-operator:1786706101",
"odf4/odr-rhel9-operator:1786706659",
"odf4/odf-csi-addons-rhel9-operator:1786702636",
"odf4/odf-rhel9-operator:1786706644",
"odf4/odf-rhel9-operator:1786702949",
"odf4/odf-cli-rhel9:1787058706",
"odf4/odr-volsync-plugin-rhel9-operator:1787060274",
"odf4/odf-cloudnative-pg-rhel9-operator:1786702315",
"odf4/mcg-rhel9-operator:1787057989",
"odf4/odf-cosi-sidecar-rhel9:1786702563",
"odf4/odf-csi-addons-sidecar-rhel9:1786702623",
"odf4/mcg-core-rhel9:1786628235",
"odf4/ocs-metrics-exporter-rhel9:1786687918",
"odf4/odf-cosi-sidecar-rhel9:1787058807",
"yarnpkg-main-1.22.22-18.1.hum1",
"odf4/odf-console-rhel9:1786706577",
"odf4/ocs-rhel9-operator:1786705802",
"odf4/odf-must-gather-rhel9:1786706612",
"odf4/odf-csi-addons-rhel9-operator:1786627430",
"odf4/odf-multicluster-rhel9-operator:1787059386",
"odf4/odr-rhel9-operator:1786702917",
"rhtas/rekor-search-ui-rhel9:1789725818",
"odf4/odf-must-gather-rhel9:1786628623",
"odf4/odr-rhel9-operator:1787059493",
"odf4/ocs-client-console-rhel9:1786706138",
"dotnet9-0-main-9.0.118-1.hum1",
"odf4/ocs-metrics-exporter-rhel9:1786702448",
"odf4/odf-cloudnative-pg-rhel9-operator:1787058403",
"odf4/cephcsi-rhel9:1786705347",
"odf4/cephcsi-rhel9-operator:1786701555",
"odf4/odf-csi-addons-rhel9-operator:1787058588",
"odf4/mcg-core-rhel9:1787058450",
"dotnet8-0-main-8.0.128-1.hum1",
"odf4/odf-multicluster-console-rhel9:1786703137",
"odf4/odf-multicluster-rhel9-operator:1786702716",
"odf4/odf-must-gather-rhel9:1787060080",
"odf4/odf-console-rhel9:1786628053",
"odf4/odf-cli-rhel9:1786628142",
"odf4/odf-cli-rhel9:1786702440",
"odf4/ocs-client-console-rhel9:1787059853",
"odf4/rook-ceph-rhel9-operator:1786706880",
"odf4/odf-external-snapshotter-rhel9-operator:1787059616",
"odf4/ocs-rhel9-operator:1786702276",
"odf4/devicefinder-rhel9:1787057603",
"odf4/ocs-client-rhel9-operator:1787057849",
"odf4/ocs-client-rhel9-operator:1786627559",
"odf4/ocs-rhel9-operator:1787058278",
"odf4/ocs-metrics-exporter-rhel9:1786705777",
"odf4/cephcsi-rhel9:1786701839",
"odf4/cephcsi-rhel9-operator:1786626399",
"odf4/odf-blackbox-exporter-rhel9:1787058658",
"rhmtc/openshift-migration-ui-rhel8:1783690532",
"odf4/ocs-client-rhel9-operator:1786702264",
"odf4/odr-rhel9-operator:1786628935",
"odf4/odf-multicluster-rhel9-operator:1786706357",
"odf4/ocs-rhel9-operator:1786629478",
"odf4/odf-external-snapshotter-sidecar-rhel9:1786644072",
"ws",
"rh-podman-desktop-0:1.1.2-1.el10_2"
],
"bugzilla": "2477914",
"bugzilla_description": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"cvss3_score": "7.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-05-15T14:53:57Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45736.json",
"severity": "important"
} |
|---|---|
| cwe | CWE-824receipt
What the source handed over{
"CVE": "CVE-2026-45736",
"CWE": "CWE-824",
"advisories": [
"RHSA-2026:48151",
"RHSA-2026:29197",
"RHSA-2026:48693",
"RHSA-2026:56431",
"RHSA-2026:33574",
"RHSA-2026:36820",
"RHSA-2026:27171",
"RHSA-2026:57590",
"RHSA-2026:65126",
"RHSA-2026:34374",
"RHSA-2026:70829",
"RHSA-2026:26638",
"RHSA-2026:44267",
"RHSA-2026:40768",
"RHSA-2026:26994",
"RHSA-2026:41928",
"RHSA-2026:56366",
"RHSA-2026:44263",
"RHSA-2026:36754",
"RHSA-2026:57013",
"RHSA-2026:56928",
"RHSA-2026:66488",
"RHSA-2026:40792",
"RHSA-2026:37272",
"RHSA-2026:66545",
"RHSA-2026:7655",
"RHSA-2026:60520",
"RHSA-2026:44235"
],
"affected_packages": [
"odf4/mcg-core-rhel9:1786705558",
"odf4/odf-cosi-sidecar-rhel9:1786627382",
"odf4/rook-ceph-rhel9-operator:1787061554",
"odf4/ocs-client-rhel9-operator:1786705741",
"openshift4/ose-monitoring-plugin-rhel9:1784670101",
"odf4/odf-drbd-rhel9:1787059538",
"odf4/odf-cloudnative-pg-rhel9-operator:1786631508",
"odf4/rook-ceph-rhel9-operator:1786703143",
"openshift4/ose-monitoring-plugin-rhel9:1784730857",
"odf4/odf-csi-addons-sidecar-rhel9:1786706188",
"odf4/mcg-core-rhel9:1786702052",
"odf4/odf-lightspeed-rag-content-rhel9:1787059085",
"odf4/odf-cli-rhel9:1786705938",
"odf4/odf-console-rhel9:1787059072",
"odf4/cephcsi-rhel9:1786627460",
"odf4/cephcsi-rhel9-operator:1787057964",
"odf4/odf-rhel9-operator:1787060105",
"odf4/odf-csi-addons-sidecar-rhel9:1786629076",
"odf4/mcg-rhel9-operator:1786702559",
"rhtas/rekor-search-ui-rhel9:1783327185",
"rhoai/odh-dashboard-rhel9:1787347991",
"odf4/rook-ceph-rhel9-operator:1786629548",
"ansible-automation-platform-26/gateway-rhel9:1782761510",
"rhdh/rhdh-hub-rhel9:1782761244",
"openshift4/ose-monitoring-plugin-rhel9:1784144936",
"odf4/ocs-metrics-exporter-rhel9:1787060257",
"odf4/odf-rhel9-operator:1786632256",
"odf4/odf-csi-addons-rhel9-operator:1786706177",
"openshift4/ose-agent-installer-ui-rhel9:1785230147",
"rhoai/odh-mod-arch-model-registry-rhel9:1787250617",
"odf4/odf-multicluster-console-rhel9:1787059621",
"odf4/odf-multicluster-console-rhel9:1786688215",
"odf4/mcg-rhel9-operator:1786627106",
"odf4/odr-volsync-plugin-mover-rhel9:1787060201",
"devspaces/dashboard-rhel9:1782498792",
"odf4/odf-multicluster-rhel9-operator:1786628340",
"odf4/odf-csi-addons-sidecar-rhel9:1787058970",
"odf4/mcg-rhel9-operator:1786705646",
"devspaces/code-rhel9:1782498475",
"openshift4/ose-agent-installer-ui-rhel9:1784713741",
"rhdh/rhdh-hub-rhel9:1783448184",
"rhoai/odh-mod-arch-automl-rhel9:1787250508",
"odf4/odf-must-gather-rhel9:1786702872",
"openshift4/ose-agent-installer-ui-rhel9:1784724699",
"odf4/odf-console-rhel9:1786703071",
"cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-13",
"rhoai/odh-mod-arch-autorag-rhel9:1787251550",
"odf4/odf-external-snapshotter-rhel9-operator:1786627469",
"rhoai/odh-mod-arch-maas-rhel9:1787251250",
"discovery/discovery-ui-rhel9:1782166952",
"odf4/odf-cosi-sidecar-rhel9:1786706125",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527",
"odf4/odf-external-snapshotter-sidecar-rhel9:1787061098",
"odf4/odf-multicluster-console-rhel9:1786706679",
"odf4/ocs-client-console-rhel9:1786702713",
"odf4/ocs-client-console-rhel9:1786629761",
"odf4/cephcsi-rhel9:1787057250",
"openshift4/ose-monitoring-plugin-rhel9:1784127553",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387",
"rhoai/odh-mod-arch-gen-ai-rhel9:1786611759",
"dotnet10-0-main-10.0.109-1.hum1",
"odf4/cephcsi-rhel9-operator:1786706101",
"odf4/odr-rhel9-operator:1786706659",
"odf4/odf-csi-addons-rhel9-operator:1786702636",
"odf4/odf-rhel9-operator:1786706644",
"odf4/odf-rhel9-operator:1786702949",
"odf4/odf-cli-rhel9:1787058706",
"odf4/odr-volsync-plugin-rhel9-operator:1787060274",
"odf4/odf-cloudnative-pg-rhel9-operator:1786702315",
"odf4/mcg-rhel9-operator:1787057989",
"odf4/odf-cosi-sidecar-rhel9:1786702563",
"odf4/odf-csi-addons-sidecar-rhel9:1786702623",
"odf4/mcg-core-rhel9:1786628235",
"odf4/ocs-metrics-exporter-rhel9:1786687918",
"odf4/odf-cosi-sidecar-rhel9:1787058807",
"yarnpkg-main-1.22.22-18.1.hum1",
"odf4/odf-console-rhel9:1786706577",
"odf4/ocs-rhel9-operator:1786705802",
"odf4/odf-must-gather-rhel9:1786706612",
"odf4/odf-csi-addons-rhel9-operator:1786627430",
"odf4/odf-multicluster-rhel9-operator:1787059386",
"odf4/odr-rhel9-operator:1786702917",
"rhtas/rekor-search-ui-rhel9:1789725818",
"odf4/odf-must-gather-rhel9:1786628623",
"odf4/odr-rhel9-operator:1787059493",
"odf4/ocs-client-console-rhel9:1786706138",
"dotnet9-0-main-9.0.118-1.hum1",
"odf4/ocs-metrics-exporter-rhel9:1786702448",
"odf4/odf-cloudnative-pg-rhel9-operator:1787058403",
"odf4/cephcsi-rhel9:1786705347",
"odf4/cephcsi-rhel9-operator:1786701555",
"odf4/odf-csi-addons-rhel9-operator:1787058588",
"odf4/mcg-core-rhel9:1787058450",
"dotnet8-0-main-8.0.128-1.hum1",
"odf4/odf-multicluster-console-rhel9:1786703137",
"odf4/odf-multicluster-rhel9-operator:1786702716",
"odf4/odf-must-gather-rhel9:1787060080",
"odf4/odf-console-rhel9:1786628053",
"odf4/odf-cli-rhel9:1786628142",
"odf4/odf-cli-rhel9:1786702440",
"odf4/ocs-client-console-rhel9:1787059853",
"odf4/rook-ceph-rhel9-operator:1786706880",
"odf4/odf-external-snapshotter-rhel9-operator:1787059616",
"odf4/ocs-rhel9-operator:1786702276",
"odf4/devicefinder-rhel9:1787057603",
"odf4/ocs-client-rhel9-operator:1787057849",
"odf4/ocs-client-rhel9-operator:1786627559",
"odf4/ocs-rhel9-operator:1787058278",
"odf4/ocs-metrics-exporter-rhel9:1786705777",
"odf4/cephcsi-rhel9:1786701839",
"odf4/cephcsi-rhel9-operator:1786626399",
"odf4/odf-blackbox-exporter-rhel9:1787058658",
"rhmtc/openshift-migration-ui-rhel8:1783690532",
"odf4/ocs-client-rhel9-operator:1786702264",
"odf4/odr-rhel9-operator:1786628935",
"odf4/odf-multicluster-rhel9-operator:1786706357",
"odf4/ocs-rhel9-operator:1786629478",
"odf4/odf-external-snapshotter-sidecar-rhel9:1786644072",
"ws",
"rh-podman-desktop-0:1.1.2-1.el10_2"
],
"bugzilla": "2477914",
"bugzilla_description": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"cvss3_score": "7.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-05-15T14:53:57Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45736.json",
"severity": "important"
} |
| packages | odf4/mcg-core-rhel9:1786705558, odf4/odf-cosi-sidecar-rhel9:1786627382, odf4/rook-ceph-rhel9-operator:1787061554, odf4/ocs-client-rhel9-operator:1786705741, openshift4/ose-monitoring-plugin-rhel9:1784670101, odf4/odf-drbd-rhel9:1787059538, odf4/odf-cloudnative-pg-rhel9-operator:1786631508, odf4/rook-ceph-rhel9-operator:1786703143, openshift4/ose-monitoring-plugin-rhel9:1784730857, odf4/odf-csi-addons-sidecar-rhel9:1786706188, odf4/mcg-core-rhel9:1786702052, odf4/odf-lightspeed-rag-content-rhel9:1787059085, odf4/odf-cli-rhel9:1786705938, odf4/odf-console-rhel9:1787059072, odf4/cephcsi-rhel9:1786627460, odf4/cephcsi-rhel9-operator:1787057964, odf4/odf-rhel9-operator:1787060105, odf4/odf-csi-addons-sidecar-rhel9:1786629076, odf4/mcg-rhel9-operator:1786702559, rhtas/rekor-search-ui-rhel9:1783327185, rhoai/odh-dashboard-rhel9:1787347991, odf4/rook-ceph-rhel9-operator:1786629548, ansible-automation-platform-26/gateway-rhel9:1782761510, rhdh/rhdh-hub-rhel9:1782761244, openshift4/ose-monitoring-plugin-rhel9:1784144936, odf4/ocs-metrics-exporter-rhel9:1787060257, odf4/odf-rhel9-operator:1786632256, odf4/odf-csi-addons-rhel9-operator:1786706177, openshift4/ose-agent-installer-ui-rhel9:1785230147, rhoai/odh-mod-arch-model-registry-rhel9:1787250617, odf4/odf-multicluster-console-rhel9:1787059621, odf4/odf-multicluster-console-rhel9:1786688215, odf4/mcg-rhel9-operator:1786627106, odf4/odr-volsync-plugin-mover-rhel9:1787060201, devspaces/dashboard-rhel9:1782498792, odf4/odf-multicluster-rhel9-operator:1786628340, odf4/odf-csi-addons-sidecar-rhel9:1787058970, odf4/mcg-rhel9-operator:1786705646, devspaces/code-rhel9:1782498475, openshift4/ose-agent-installer-ui-rhel9:1784713741, rhdh/rhdh-hub-rhel9:1783448184, rhoai/odh-mod-arch-automl-rhel9:1787250508, odf4/odf-must-gather-rhel9:1786702872, openshift4/ose-agent-installer-ui-rhel9:1784724699, odf4/odf-console-rhel9:1786703071, cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-13, rhoai/odh-mod-arch-autorag-rhel9:1787251550, odf4/odf-external-snapshotter-rhel9-operator:1786627469, rhoai/odh-mod-arch-maas-rhel9:1787251250, discovery/discovery-ui-rhel9:1782166952, odf4/odf-cosi-sidecar-rhel9:1786706125, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527, odf4/odf-external-snapshotter-sidecar-rhel9:1787061098, odf4/odf-multicluster-console-rhel9:1786706679, odf4/ocs-client-console-rhel9:1786702713, odf4/ocs-client-console-rhel9:1786629761, odf4/cephcsi-rhel9:1787057250, openshift4/ose-monitoring-plugin-rhel9:1784127553, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387, rhoai/odh-mod-arch-gen-ai-rhel9:1786611759, dotnet10-0-main-10.0.109-1.hum1, odf4/cephcsi-rhel9-operator:1786706101, odf4/odr-rhel9-operator:1786706659, odf4/odf-csi-addons-rhel9-operator:1786702636, odf4/odf-rhel9-operator:1786706644, odf4/odf-rhel9-operator:1786702949, odf4/odf-cli-rhel9:1787058706, odf4/odr-volsync-plugin-rhel9-operator:1787060274, odf4/odf-cloudnative-pg-rhel9-operator:1786702315, odf4/mcg-rhel9-operator:1787057989, odf4/odf-cosi-sidecar-rhel9:1786702563, odf4/odf-csi-addons-sidecar-rhel9:1786702623, odf4/mcg-core-rhel9:1786628235, odf4/ocs-metrics-exporter-rhel9:1786687918, odf4/odf-cosi-sidecar-rhel9:1787058807, yarnpkg-main-1.22.22-18.1.hum1, odf4/odf-console-rhel9:1786706577, odf4/ocs-rhel9-operator:1786705802, odf4/odf-must-gather-rhel9:1786706612, odf4/odf-csi-addons-rhel9-operator:1786627430, odf4/odf-multicluster-rhel9-operator:1787059386, odf4/odr-rhel9-operator:1786702917, rhtas/rekor-search-ui-rhel9:1789725818, odf4/odf-must-gather-rhel9:1786628623, odf4/odr-rhel9-operator:1787059493, odf4/ocs-client-console-rhel9:1786706138, dotnet9-0-main-9.0.118-1.hum1, odf4/ocs-metrics-exporter-rhel9:1786702448, odf4/odf-cloudnative-pg-rhel9-operator:1787058403, odf4/cephcsi-rhel9:1786705347, odf4/cephcsi-rhel9-operator:1786701555, odf4/odf-csi-addons-rhel9-operator:1787058588, odf4/mcg-core-rhel9:1787058450, dotnet8-0-main-8.0.128-1.hum1, odf4/odf-multicluster-console-rhel9:1786703137, odf4/odf-multicluster-rhel9-operator:1786702716, odf4/odf-must-gather-rhel9:1787060080, odf4/odf-console-rhel9:1786628053, odf4/odf-cli-rhel9:1786628142, odf4/odf-cli-rhel9:1786702440, odf4/ocs-client-console-rhel9:1787059853, odf4/rook-ceph-rhel9-operator:1786706880, odf4/odf-external-snapshotter-rhel9-operator:1787059616, odf4/ocs-rhel9-operator:1786702276, odf4/devicefinder-rhel9:1787057603, odf4/ocs-client-rhel9-operator:1787057849, odf4/ocs-client-rhel9-operator:1786627559, odf4/ocs-rhel9-operator:1787058278, odf4/ocs-metrics-exporter-rhel9:1786705777, odf4/cephcsi-rhel9:1786701839, odf4/cephcsi-rhel9-operator:1786626399, odf4/odf-blackbox-exporter-rhel9:1787058658, rhmtc/openshift-migration-ui-rhel8:1783690532, odf4/ocs-client-rhel9-operator:1786702264, odf4/odr-rhel9-operator:1786628935, odf4/odf-multicluster-rhel9-operator:1786706357, odf4/ocs-rhel9-operator:1786629478, odf4/odf-external-snapshotter-sidecar-rhel9:1786644072, ws, rh-podman-desktop-0:1.1.2-1.el10_2receipt
What the source handed over{
"CVE": "CVE-2026-45736",
"CWE": "CWE-824",
"advisories": [
"RHSA-2026:48151",
"RHSA-2026:29197",
"RHSA-2026:48693",
"RHSA-2026:56431",
"RHSA-2026:33574",
"RHSA-2026:36820",
"RHSA-2026:27171",
"RHSA-2026:57590",
"RHSA-2026:65126",
"RHSA-2026:34374",
"RHSA-2026:70829",
"RHSA-2026:26638",
"RHSA-2026:44267",
"RHSA-2026:40768",
"RHSA-2026:26994",
"RHSA-2026:41928",
"RHSA-2026:56366",
"RHSA-2026:44263",
"RHSA-2026:36754",
"RHSA-2026:57013",
"RHSA-2026:56928",
"RHSA-2026:66488",
"RHSA-2026:40792",
"RHSA-2026:37272",
"RHSA-2026:66545",
"RHSA-2026:7655",
"RHSA-2026:60520",
"RHSA-2026:44235"
],
"affected_packages": [
"odf4/mcg-core-rhel9:1786705558",
"odf4/odf-cosi-sidecar-rhel9:1786627382",
"odf4/rook-ceph-rhel9-operator:1787061554",
"odf4/ocs-client-rhel9-operator:1786705741",
"openshift4/ose-monitoring-plugin-rhel9:1784670101",
"odf4/odf-drbd-rhel9:1787059538",
"odf4/odf-cloudnative-pg-rhel9-operator:1786631508",
"odf4/rook-ceph-rhel9-operator:1786703143",
"openshift4/ose-monitoring-plugin-rhel9:1784730857",
"odf4/odf-csi-addons-sidecar-rhel9:1786706188",
"odf4/mcg-core-rhel9:1786702052",
"odf4/odf-lightspeed-rag-content-rhel9:1787059085",
"odf4/odf-cli-rhel9:1786705938",
"odf4/odf-console-rhel9:1787059072",
"odf4/cephcsi-rhel9:1786627460",
"odf4/cephcsi-rhel9-operator:1787057964",
"odf4/odf-rhel9-operator:1787060105",
"odf4/odf-csi-addons-sidecar-rhel9:1786629076",
"odf4/mcg-rhel9-operator:1786702559",
"rhtas/rekor-search-ui-rhel9:1783327185",
"rhoai/odh-dashboard-rhel9:1787347991",
"odf4/rook-ceph-rhel9-operator:1786629548",
"ansible-automation-platform-26/gateway-rhel9:1782761510",
"rhdh/rhdh-hub-rhel9:1782761244",
"openshift4/ose-monitoring-plugin-rhel9:1784144936",
"odf4/ocs-metrics-exporter-rhel9:1787060257",
"odf4/odf-rhel9-operator:1786632256",
"odf4/odf-csi-addons-rhel9-operator:1786706177",
"openshift4/ose-agent-installer-ui-rhel9:1785230147",
"rhoai/odh-mod-arch-model-registry-rhel9:1787250617",
"odf4/odf-multicluster-console-rhel9:1787059621",
"odf4/odf-multicluster-console-rhel9:1786688215",
"odf4/mcg-rhel9-operator:1786627106",
"odf4/odr-volsync-plugin-mover-rhel9:1787060201",
"devspaces/dashboard-rhel9:1782498792",
"odf4/odf-multicluster-rhel9-operator:1786628340",
"odf4/odf-csi-addons-sidecar-rhel9:1787058970",
"odf4/mcg-rhel9-operator:1786705646",
"devspaces/code-rhel9:1782498475",
"openshift4/ose-agent-installer-ui-rhel9:1784713741",
"rhdh/rhdh-hub-rhel9:1783448184",
"rhoai/odh-mod-arch-automl-rhel9:1787250508",
"odf4/odf-must-gather-rhel9:1786702872",
"openshift4/ose-agent-installer-ui-rhel9:1784724699",
"odf4/odf-console-rhel9:1786703071",
"cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-13",
"rhoai/odh-mod-arch-autorag-rhel9:1787251550",
"odf4/odf-external-snapshotter-rhel9-operator:1786627469",
"rhoai/odh-mod-arch-maas-rhel9:1787251250",
"discovery/discovery-ui-rhel9:1782166952",
"odf4/odf-cosi-sidecar-rhel9:1786706125",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527",
"odf4/odf-external-snapshotter-sidecar-rhel9:1787061098",
"odf4/odf-multicluster-console-rhel9:1786706679",
"odf4/ocs-client-console-rhel9:1786702713",
"odf4/ocs-client-console-rhel9:1786629761",
"odf4/cephcsi-rhel9:1787057250",
"openshift4/ose-monitoring-plugin-rhel9:1784127553",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387",
"rhoai/odh-mod-arch-gen-ai-rhel9:1786611759",
"dotnet10-0-main-10.0.109-1.hum1",
"odf4/cephcsi-rhel9-operator:1786706101",
"odf4/odr-rhel9-operator:1786706659",
"odf4/odf-csi-addons-rhel9-operator:1786702636",
"odf4/odf-rhel9-operator:1786706644",
"odf4/odf-rhel9-operator:1786702949",
"odf4/odf-cli-rhel9:1787058706",
"odf4/odr-volsync-plugin-rhel9-operator:1787060274",
"odf4/odf-cloudnative-pg-rhel9-operator:1786702315",
"odf4/mcg-rhel9-operator:1787057989",
"odf4/odf-cosi-sidecar-rhel9:1786702563",
"odf4/odf-csi-addons-sidecar-rhel9:1786702623",
"odf4/mcg-core-rhel9:1786628235",
"odf4/ocs-metrics-exporter-rhel9:1786687918",
"odf4/odf-cosi-sidecar-rhel9:1787058807",
"yarnpkg-main-1.22.22-18.1.hum1",
"odf4/odf-console-rhel9:1786706577",
"odf4/ocs-rhel9-operator:1786705802",
"odf4/odf-must-gather-rhel9:1786706612",
"odf4/odf-csi-addons-rhel9-operator:1786627430",
"odf4/odf-multicluster-rhel9-operator:1787059386",
"odf4/odr-rhel9-operator:1786702917",
"rhtas/rekor-search-ui-rhel9:1789725818",
"odf4/odf-must-gather-rhel9:1786628623",
"odf4/odr-rhel9-operator:1787059493",
"odf4/ocs-client-console-rhel9:1786706138",
"dotnet9-0-main-9.0.118-1.hum1",
"odf4/ocs-metrics-exporter-rhel9:1786702448",
"odf4/odf-cloudnative-pg-rhel9-operator:1787058403",
"odf4/cephcsi-rhel9:1786705347",
"odf4/cephcsi-rhel9-operator:1786701555",
"odf4/odf-csi-addons-rhel9-operator:1787058588",
"odf4/mcg-core-rhel9:1787058450",
"dotnet8-0-main-8.0.128-1.hum1",
"odf4/odf-multicluster-console-rhel9:1786703137",
"odf4/odf-multicluster-rhel9-operator:1786702716",
"odf4/odf-must-gather-rhel9:1787060080",
"odf4/odf-console-rhel9:1786628053",
"odf4/odf-cli-rhel9:1786628142",
"odf4/odf-cli-rhel9:1786702440",
"odf4/ocs-client-console-rhel9:1787059853",
"odf4/rook-ceph-rhel9-operator:1786706880",
"odf4/odf-external-snapshotter-rhel9-operator:1787059616",
"odf4/ocs-rhel9-operator:1786702276",
"odf4/devicefinder-rhel9:1787057603",
"odf4/ocs-client-rhel9-operator:1787057849",
"odf4/ocs-client-rhel9-operator:1786627559",
"odf4/ocs-rhel9-operator:1787058278",
"odf4/ocs-metrics-exporter-rhel9:1786705777",
"odf4/cephcsi-rhel9:1786701839",
"odf4/cephcsi-rhel9-operator:1786626399",
"odf4/odf-blackbox-exporter-rhel9:1787058658",
"rhmtc/openshift-migration-ui-rhel8:1783690532",
"odf4/ocs-client-rhel9-operator:1786702264",
"odf4/odr-rhel9-operator:1786628935",
"odf4/odf-multicluster-rhel9-operator:1786706357",
"odf4/ocs-rhel9-operator:1786629478",
"odf4/odf-external-snapshotter-sidecar-rhel9:1786644072",
"ws",
"rh-podman-desktop-0:1.1.2-1.el10_2"
],
"bugzilla": "2477914",
"bugzilla_description": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"cvss3_score": "7.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-05-15T14:53:57Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45736.json",
"severity": "important"
} |
| severity | important A flaw that can easily compromise confidentiality, integrity or availability. receipt
What the source handed over{
"CVE": "CVE-2026-45736",
"CWE": "CWE-824",
"advisories": [
"RHSA-2026:48151",
"RHSA-2026:29197",
"RHSA-2026:48693",
"RHSA-2026:56431",
"RHSA-2026:33574",
"RHSA-2026:36820",
"RHSA-2026:27171",
"RHSA-2026:57590",
"RHSA-2026:65126",
"RHSA-2026:34374",
"RHSA-2026:70829",
"RHSA-2026:26638",
"RHSA-2026:44267",
"RHSA-2026:40768",
"RHSA-2026:26994",
"RHSA-2026:41928",
"RHSA-2026:56366",
"RHSA-2026:44263",
"RHSA-2026:36754",
"RHSA-2026:57013",
"RHSA-2026:56928",
"RHSA-2026:66488",
"RHSA-2026:40792",
"RHSA-2026:37272",
"RHSA-2026:66545",
"RHSA-2026:7655",
"RHSA-2026:60520",
"RHSA-2026:44235"
],
"affected_packages": [
"odf4/mcg-core-rhel9:1786705558",
"odf4/odf-cosi-sidecar-rhel9:1786627382",
"odf4/rook-ceph-rhel9-operator:1787061554",
"odf4/ocs-client-rhel9-operator:1786705741",
"openshift4/ose-monitoring-plugin-rhel9:1784670101",
"odf4/odf-drbd-rhel9:1787059538",
"odf4/odf-cloudnative-pg-rhel9-operator:1786631508",
"odf4/rook-ceph-rhel9-operator:1786703143",
"openshift4/ose-monitoring-plugin-rhel9:1784730857",
"odf4/odf-csi-addons-sidecar-rhel9:1786706188",
"odf4/mcg-core-rhel9:1786702052",
"odf4/odf-lightspeed-rag-content-rhel9:1787059085",
"odf4/odf-cli-rhel9:1786705938",
"odf4/odf-console-rhel9:1787059072",
"odf4/cephcsi-rhel9:1786627460",
"odf4/cephcsi-rhel9-operator:1787057964",
"odf4/odf-rhel9-operator:1787060105",
"odf4/odf-csi-addons-sidecar-rhel9:1786629076",
"odf4/mcg-rhel9-operator:1786702559",
"rhtas/rekor-search-ui-rhel9:1783327185",
"rhoai/odh-dashboard-rhel9:1787347991",
"odf4/rook-ceph-rhel9-operator:1786629548",
"ansible-automation-platform-26/gateway-rhel9:1782761510",
"rhdh/rhdh-hub-rhel9:1782761244",
"openshift4/ose-monitoring-plugin-rhel9:1784144936",
"odf4/ocs-metrics-exporter-rhel9:1787060257",
"odf4/odf-rhel9-operator:1786632256",
"odf4/odf-csi-addons-rhel9-operator:1786706177",
"openshift4/ose-agent-installer-ui-rhel9:1785230147",
"rhoai/odh-mod-arch-model-registry-rhel9:1787250617",
"odf4/odf-multicluster-console-rhel9:1787059621",
"odf4/odf-multicluster-console-rhel9:1786688215",
"odf4/mcg-rhel9-operator:1786627106",
"odf4/odr-volsync-plugin-mover-rhel9:1787060201",
"devspaces/dashboard-rhel9:1782498792",
"odf4/odf-multicluster-rhel9-operator:1786628340",
"odf4/odf-csi-addons-sidecar-rhel9:1787058970",
"odf4/mcg-rhel9-operator:1786705646",
"devspaces/code-rhel9:1782498475",
"openshift4/ose-agent-installer-ui-rhel9:1784713741",
"rhdh/rhdh-hub-rhel9:1783448184",
"rhoai/odh-mod-arch-automl-rhel9:1787250508",
"odf4/odf-must-gather-rhel9:1786702872",
"openshift4/ose-agent-installer-ui-rhel9:1784724699",
"odf4/odf-console-rhel9:1786703071",
"cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-13",
"rhoai/odh-mod-arch-autorag-rhel9:1787251550",
"odf4/odf-external-snapshotter-rhel9-operator:1786627469",
"rhoai/odh-mod-arch-maas-rhel9:1787251250",
"discovery/discovery-ui-rhel9:1782166952",
"odf4/odf-cosi-sidecar-rhel9:1786706125",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787801527",
"odf4/odf-external-snapshotter-sidecar-rhel9:1787061098",
"odf4/odf-multicluster-console-rhel9:1786706679",
"odf4/ocs-client-console-rhel9:1786702713",
"odf4/ocs-client-console-rhel9:1786629761",
"odf4/cephcsi-rhel9:1787057250",
"openshift4/ose-monitoring-plugin-rhel9:1784127553",
"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387",
"rhoai/odh-mod-arch-gen-ai-rhel9:1786611759",
"dotnet10-0-main-10.0.109-1.hum1",
"odf4/cephcsi-rhel9-operator:1786706101",
"odf4/odr-rhel9-operator:1786706659",
"odf4/odf-csi-addons-rhel9-operator:1786702636",
"odf4/odf-rhel9-operator:1786706644",
"odf4/odf-rhel9-operator:1786702949",
"odf4/odf-cli-rhel9:1787058706",
"odf4/odr-volsync-plugin-rhel9-operator:1787060274",
"odf4/odf-cloudnative-pg-rhel9-operator:1786702315",
"odf4/mcg-rhel9-operator:1787057989",
"odf4/odf-cosi-sidecar-rhel9:1786702563",
"odf4/odf-csi-addons-sidecar-rhel9:1786702623",
"odf4/mcg-core-rhel9:1786628235",
"odf4/ocs-metrics-exporter-rhel9:1786687918",
"odf4/odf-cosi-sidecar-rhel9:1787058807",
"yarnpkg-main-1.22.22-18.1.hum1",
"odf4/odf-console-rhel9:1786706577",
"odf4/ocs-rhel9-operator:1786705802",
"odf4/odf-must-gather-rhel9:1786706612",
"odf4/odf-csi-addons-rhel9-operator:1786627430",
"odf4/odf-multicluster-rhel9-operator:1787059386",
"odf4/odr-rhel9-operator:1786702917",
"rhtas/rekor-search-ui-rhel9:1789725818",
"odf4/odf-must-gather-rhel9:1786628623",
"odf4/odr-rhel9-operator:1787059493",
"odf4/ocs-client-console-rhel9:1786706138",
"dotnet9-0-main-9.0.118-1.hum1",
"odf4/ocs-metrics-exporter-rhel9:1786702448",
"odf4/odf-cloudnative-pg-rhel9-operator:1787058403",
"odf4/cephcsi-rhel9:1786705347",
"odf4/cephcsi-rhel9-operator:1786701555",
"odf4/odf-csi-addons-rhel9-operator:1787058588",
"odf4/mcg-core-rhel9:1787058450",
"dotnet8-0-main-8.0.128-1.hum1",
"odf4/odf-multicluster-console-rhel9:1786703137",
"odf4/odf-multicluster-rhel9-operator:1786702716",
"odf4/odf-must-gather-rhel9:1787060080",
"odf4/odf-console-rhel9:1786628053",
"odf4/odf-cli-rhel9:1786628142",
"odf4/odf-cli-rhel9:1786702440",
"odf4/ocs-client-console-rhel9:1787059853",
"odf4/rook-ceph-rhel9-operator:1786706880",
"odf4/odf-external-snapshotter-rhel9-operator:1787059616",
"odf4/ocs-rhel9-operator:1786702276",
"odf4/devicefinder-rhel9:1787057603",
"odf4/ocs-client-rhel9-operator:1787057849",
"odf4/ocs-client-rhel9-operator:1786627559",
"odf4/ocs-rhel9-operator:1787058278",
"odf4/ocs-metrics-exporter-rhel9:1786705777",
"odf4/cephcsi-rhel9:1786701839",
"odf4/cephcsi-rhel9-operator:1786626399",
"odf4/odf-blackbox-exporter-rhel9:1787058658",
"rhmtc/openshift-migration-ui-rhel8:1783690532",
"odf4/ocs-client-rhel9-operator:1786702264",
"odf4/odr-rhel9-operator:1786628935",
"odf4/odf-multicluster-rhel9-operator:1786706357",
"odf4/ocs-rhel9-operator:1786629478",
"odf4/odf-external-snapshotter-sidecar-rhel9:1786644072",
"ws",
"rh-podman-desktop-0:1.1.2-1.el10_2"
],
"bugzilla": "2477914",
"bugzilla_description": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"cvss3_score": "7.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-05-15T14:53:57Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45736.json",
"severity": "important"
} |
Text
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`