{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/vex/2023/cve-2023-54404-els_os-tuxcare9_8esu.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-24T18:00:56Z",
      "generator": {
        "date": "2026-10-24T18:00:56Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2023-54404-ELS_OS-TUXCARE9.8ESU",
      "initial_release_date": "2023-01-01T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-01-01T00:00:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T20:49:16Z",
          "number": "2",
          "summary": "Official Publication"
        },
        {
          "date": "2026-10-21T12:46:01Z",
          "number": "3",
          "summary": "Update document"
        },
        {
          "date": "2026-10-24T18:00:56Z",
          "number": "4",
          "summary": "Update document"
        }
      ],
      "status": "final",
      "version": "4"
    },
    "title": "Security update on CVE-2023-54404"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "AlmaLinux 9.8",
                "product": {
                  "name": "AlmaLinux 9.8",
                  "product_id": "AlmaLinux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "AlmaLinux"
          }
        ],
        "category": "vendor",
        "name": "AlmaLinux OS Foundation"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Rocky Linux 9.8",
                "product": {
                  "name": "Rocky Linux 9.8",
                  "product_id": "Rocky Linux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Rocky Linux"
          }
        ],
        "category": "vendor",
        "name": "Rocky Linux"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                "product": {
                  "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                  "product_id": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana@10.2.6-23.el9_8.3.tuxcare.els6?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                "product": {
                  "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                  "product_id": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/grafana-selinux@10.2.6-23.el9_8.3.tuxcare.els6?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64"
        },
        "product_reference": "grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64"
        },
        "product_reference": "grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-54404",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "description",
          "text": "Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an application that uses a container schema without an explicit size constraint. The handleArrayResult parse logic in $ZodArray (and the equivalent set and map paths) accumulates every validation issue for each failing element with no cap or early termination, causing the process to allocate one issue object per element and crash under out-of-memory conditions. This is reachable in the default configuration whenever a container schema such as z.array() is declared without a size bound. The upstream change in commit e06a510 (pull request 6652, first released in 4.6.6) only moves the .max(), .length() and .size() size checks to run before element parsing, so it rejects oversized input for schemas that declare an explicit upper bound; per the maintainer, unbounded containers are unchanged. No released version remediates the unbounded (default) case described here, and an opt-in setting to cap total accumulated errors was proposed but not merged.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
          "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
          "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
          "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
          "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54404"
        },
        {
          "category": "external",
          "summary": "https://github.com/colinhacks/zod/issues/1872",
          "url": "https://github.com/colinhacks/zod/issues/1872"
        },
        {
          "category": "external",
          "summary": "https://github.com/colinhacks/zod/pull/6475",
          "url": "https://github.com/colinhacks/zod/pull/6475"
        },
        {
          "category": "external",
          "summary": "https://github.com/colinhacks/zod/pull/6652",
          "url": "https://github.com/colinhacks/zod/pull/6652"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation",
          "url": "https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation"
        }
      ],
      "release_date": "2026-10-01T18:17:00Z",
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        },
        {
          "category": "impact",
          "date": "2026-10-21T12:20:56.165348Z",
          "details": "unknown",
          "product_ids": [
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
            "AlmaLinux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
            "AlmaLinux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
            "Rocky Linux-9.8:grafana-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.aarch64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els2.x86_64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.aarch64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els5.x86_64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.aarch64",
            "Rocky Linux-9.8:grafana-selinux-0:10.2.6-23.el9_8.3.tuxcare.els6.x86_64"
          ]
        }
      ]
    }
  ]
}