Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-32285

Fixed in a distro release EPSS <1%CVSS 7.5

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

Published 2026-03-26 · CVE record · OSV

Products: github.com/buger/jsonparser, Red Hat Cluster Observability Operator 1.5.0, Logging Subsystem for Red Hat OpenShift 6.4, Red Hat multicluster engine for Kubernetes 2.1, Red Hat multicluster engine for Kubernetes 2.8, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Advanced Cluster Management for Kubernetes 2.15, Red Hat Hardened Images, Red Hat multicluster global hub 1.5.3, Red Hat OpenShift distributed tracing 3.9.3, Logging Subsystem for Red Hat OpenShift, Red Hat Ansible Automation Platform 2, Red Hat OpenShift Container Platform 4, Red Hat OpenShift for Windows Containers, Red Hat OpenShift GitOps, Red Hat OpenStack Platform 18.0

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/buger/jsonparser1.1.2

Distro releases

ReleasePackageFixed in
Amazon Linux 2cri-tools1.32.0-1.amzn2.0.5
Amazon Linux 2023rclone1.73.4-74.amzn2023
Chainguardcg0.2.225-r0
Chainguardchainloop-cli1.83.0-r1
Chainguardchainloop-cli-fips1.83.0-r1
Chainguardchainloop-control-plane1.83.0-r1
Chainguardchainloop-control-plane-fips1.83.0-r1
Chainguardcommercial-grafana-11.611.6.14-r0
Chainguardcommercial-grafana-12.112.1.10-r0
Chainguardcommercial-grafana-12.212.2.8-r0
Chainguardcommercial-grafana-12.312.3.6-r0
Chainguardcommercial-grafana-12.412.4.2-r0
Chainguardcri-tools1.35.0-r7
Chainguardcrictl1.35.0-r7
Chainguarddagger0.20.2-r0
Chainguarddatadog-agent-7.710
Chainguarddatadog-agent-7.720
Chainguarddatadog-agent-7.730
Chainguarddatadog-agent-7.747.74.1-r11
Chainguarddatadog-agent-7.75no fix
Chainguarddatadog-agent-7.767.76.3-r3
Chainguarddatadog-agent-fips-7.710
Chainguarddatadog-agent-fips-7.727.72.4-r8
Chainguarddatadog-agent-fips-7.737.73.3-r7
Chainguarddatadog-agent-fips-7.740
Chainguarddatadog-agent-fips-7.75no fix
Chainguarddatadog-agent-fips-7.767.76.3-r3
Chainguarddeck1.56.0-r2
Chainguarddeck-fips1.56.0-r3
Chainguarddgraph25.3.0-r3
Chainguardeksctl0.224.0-r7
Chainguardelastic-agent-8.198.19.14-r1
Chainguardelastic-agent-fips-8.198.19.14-r1
Chainguardelastic-otel-collector-9.30
Chainguardelastic-otel-collector-fips-9.30
Chainguardgitlab-runner-18.6no fix
Chainguardgitlab-runner-18.718.7.2-r10
Chainguardgitlab-runner-18.818.8.0-r5
Chainguardgitlab-runner-18.918.9.0-r4
Chainguardgitlab-runner-fips-18.7no fix
Chainguardgitlab-runner-fips-18.818.8.0-r6
Chainguardgitlab-runner-fips-18.918.9.0-r4
Chainguardgitlab-runner-helper-18.718.7.2-r10
Chainguardgitlab-runner-helper-18.818.8.0-r5
Chainguardgitlab-runner-helper-18.918.9.0-r4
Chainguardgitlab-runner-helper-fips-18.7no fix
Chainguardgitlab-runner-helper-fips-18.818.8.0-r6
Chainguardgitlab-runner-helper-fips-18.918.9.0-r4
Chainguardgoogle-cloud-otel-ops-collector0
Chainguardgoreleaser2.14.3-r3
Chainguardgrafana-11.4no fix
Chainguardgrafana-11.5no fix
Chainguardgrafana-11.611.6.13-r2
Chainguardgrafana-12.0no fix
Chainguardgrafana-12.112.1.9-r2
Chainguardgrafana-12.212.2.7-r2
Chainguardgrafana-12.312.3.5-r2
Chainguardgrafana-12.412.4.1-r2
Chainguardgrafana-alloy1.14.1-r2
Chainguardgrafana-alloy-fips1.14.1-r2
Chainguardgrafana-beyla3.6.0-r1
Chainguardgrafana-fips-11.4no fix
Chainguardgrafana-fips-11.5no fix
Chainguardgrafana-fips-11.611.6.13-r4
Chainguardgrafana-fips-12.0no fix
Chainguardgrafana-fips-12.112.1.9-r4
Chainguardgrafana-fips-12.212.2.7-r2
Chainguardgrafana-fips-12.312.3.5-r3
Chainguardgrafana-fips-12.412.4.2-r0
Chainguardinfluxd-2.72.7.12-r15
Chainguardjfrog-cli2.96.0-r2
Chainguardk3s1.35.2.1-r2
Chainguardk3s-1.311.31.6.1-r15
Chainguardk3s-1.321.32.13.1-r6
Chainguardk3s-1.331.33.9.1-r4
Chainguardk3s-static1.35.2.1-r2
Chainguardk3s-static-1.311.31.6.1-r15
Chainguardk3s-static-1.321.32.13.1-r6
Chainguardk3s-static-1.331.33.9.1-r4
Chainguardk8sgpt0.4.30-r4
Chainguardkubevela-vela-cli1.10.7-r5
Chainguardkubevela-vela-cli-fips1.10.7-r6
Chainguardkubevela-vela-core1.10.7-r5
Chainguardkubevela-vela-core-fips1.10.7-r6
Chainguardlazygit0.60.0-r4
Chainguardloki-2.92.9.17-r5
Chainguardloki-2.9-logcli2.9.17-r5
Chainguardloki-2.9-loki-canary2.9.17-r5
Chainguardloki-2.9-promtail2.9.17-r5
Chainguardloki-3.43.4.6-r10
Chainguardloki-3.4-logcli3.4.6-r10
Chainguardloki-3.53.5.12-r1
Chainguardloki-3.5-logcli3.5.12-r1
Chainguardloki-3.63.6.7-r4
Chainguardloki-3.6-logcli3.6.7-r4
Chainguardloki-fips-2.92.9.17-r6
Chainguardloki-fips-2.9-logcli2.9.17-r6
Chainguardloki-fips-2.9-loki-canary2.9.17-r6
Chainguardloki-fips-2.9-promtail2.9.17-r6
Chainguardloki-fips-3.43.4.6-r9
Chainguardloki-fips-3.4-logcli3.4.6-r9
Chainguardloki-fips-3.53.5.12-r2
Chainguardloki-fips-3.5-logcli3.5.12-r2
Chainguardloki-fips-3.63.6.7-r4
Chainguardloki-fips-3.6-logcli3.6.7-r4
Chainguardmalcontent1.21.3-r1
Chainguardmaru0.6.0-r11
Chainguardmcp-grafana0.11.3-r5
Chainguardmcp-grafana-fips0.11.3-r2
Chainguardminio0.20251015.172955-r10
Chainguardminio-fips0.20251015.172955-r11
Chainguardmods0
Chainguardnfpm2.45.2-r3
Chainguardnuclei3.7.1-r3
Chainguardollama0.18.2-r1
Chainguardollama-fips0.18.2-r1
Chainguardopentelemetry-collector0.148.0-r1
Chainguardopentelemetry-collector-contrib0.148.0-r3
Chainguardopentelemetry-collector-contrib-fips0.148.0-r2
Chainguardopentelemetry-collector-fips0
Chainguardprometheus-3.103.10.0-r3
Chainguardprometheus-fips-3.103.10.0-r2
Chainguardrclone1.73.2-r2
Chainguardrclone-fips1.73.3-r0
Chainguardrpk-25.1.1225.1.12-r8
Chainguardrpk-25.2.1425.2.14-r4
Chainguardrpk-25.3.1025.3.10-r3
Chainguardteleport-1818.7.2-r4
Chainguardteleport-18.618.6.8-r7
Chainguardtempo-2.102.10.3-r6
Chainguardtempo-2.10-cli2.10.3-r6
Chainguardtempo-2.10-vulture2.10.3-r6
Chainguardtempo-2.92.9.1-r3
Chainguardtempo-2.9-cli2.9.1-r3
Chainguardtempo-fips-2.102.10.3-r2
Chainguardtempo-fips-2.10-cli2.10.3-r2
Chainguardtempo-fips-2.10-vulture2.10.3-r2
Chainguardtempo-fips-2.92.9.1-r3
Chainguardtempo-fips-2.9-cli2.9.1-r3
Chainguardterraform-mcp-server0.4.0-r3
Chainguardterragrunt0.99.5-r1
Chainguardterragrunt-fips0.99.4-r6
Chainguardvcluster0.32.1-r7
Chainguardvcluster-cli0.32.1-r7
Chainguardvcluster-syncer0.32.1-r7
Chainguardweaviate1.36.6-r1
Chainguardwitness0.10.2-r15
Debian 12golang-github-buger-jsonparserno fix
Debian 13golang-github-buger-jsonparserno fix
Debian 14golang-github-buger-jsonparser1.1.2-1
Red Hat hummingbird 1syft0:1.42.4-0.1.hum1
Red Hat hummingbird 1trivy0:0.72.0-0.1.hum1
Ubuntu 18.04 LTSgolang-github-buger-jsonparserno fix
Ubuntu 20.04 LTSgolang-github-buger-jsonparserno fix
Ubuntu 22.04 LTSgolang-github-buger-jsonparserno fix
Ubuntu 24.04 LTSgolang-github-buger-jsonparserno fix
Ubuntu 25.10golang-github-buger-jsonparserno fix
Ubuntu 26.04 LTSgolang-github-buger-jsonparserno fix
Ubuntu 26.10golang-github-buger-jsonparserno fix
Wolficri-tools1.35.0-r7
Wolficrictl1.35.0-r7
Wolfidagger0.20.2-r0
Wolfidatadog-agent-7.720
Wolfidatadog-agent-7.730
Wolfidatadog-agent-7.747.74.1-r11
Wolfidatadog-agent-7.75no fix
Wolfidatadog-agent-7.767.76.3-r3
Wolfidgraph25.3.0-r3
Wolfieksctl0.224.0-r7
Wolfigitlab-runner-18.6no fix
Wolfigitlab-runner-18.718.7.2-r10
Wolfigitlab-runner-18.818.8.0-r5
Wolfigitlab-runner-18.918.9.0-r4
Wolfigitlab-runner-helper-18.718.7.2-r10
Wolfigitlab-runner-helper-18.818.8.0-r5
Wolfigitlab-runner-helper-18.918.9.0-r4
Wolfigoreleaser2.14.3-r3
Wolfigrafana-12.312.3.5-r2
Wolfigrafana-12.412.4.1-r2
Wolfigrafana-alloy1.14.1-r2
Wolfik3s1.35.2.1-r2
Wolfik3s-1.321.32.13.1-r6
Wolfik3s-1.331.33.9.1-r4
Wolfik3s-static1.35.2.1-r2
Wolfik3s-static-1.321.32.13.1-r6
Wolfik3s-static-1.331.33.9.1-r4
Wolfik8sgpt0.4.30-r4
Wolfikubevela-vela-cli1.10.7-r5
Wolfikubevela-vela-core1.10.7-r5
Wolfilazygit0.60.0-r4
Wolfiloki-3.63.6.7-r4
Wolfiloki-3.6-logcli3.6.7-r4
Wolfimalcontent1.21.3-r1
Wolfimaru0.6.0-r11
Wolfimcp-grafana0.11.3-r5
Wolfiminio0.20251015.172955-r10
Wolfimods0
Wolfinfpm2.45.2-r3
Wolfinuclei3.7.1-r3
Wolfiollama0.18.2-r1
Wolfiopentelemetry-collector0.148.0-r1
Wolfiopentelemetry-collector-contrib0.148.0-r3
Wolfiprometheus-3.103.10.0-r3
Wolfirclone1.73.2-r2
Wolfirpk-25.3.1025.3.10-r3
Wolfiteleport-18.618.6.8-r7
Wolfitempo-2.102.10.3-r6
Wolfitempo-2.10-cli2.10.3-r6
Wolfitempo-2.10-vulture2.10.3-r6
Wolfiterraform-mcp-server0.4.0-r3
Wolfiterragrunt0.99.5-r1
Wolfivcluster0.32.1-r7
Wolfivcluster-cli0.32.1-r7
Wolfivcluster-syncer0.32.1-r7
Wolfiweaviate1.36.6-r1
Wolfiwitness0.10.2-r15
openSUSE Leap 15.6govulncheck-vulndb0.0.20260326T203309-150000.1.155.2
openSUSE Leap 16.0govulncheck-vulndb0.0.20260723T184607-160000.1.1
openSUSE Tumbleweedmcphost0.34.0-1.1